Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade podman-testsUpgrade podman-dockerUpgrade slirp4netnsUpgrade golang-docsUpgrade golang-testsUpgrade cockpit-podmanUpgrade crunUpgrade python3-podmanUpgrade toolboxUpgrade conmonUpgrade criu-develUpgrade podman-pluginsUpgrade critUpgrade go-toolsetUpgrade runcUpgrade buildah-testsUpgrade podman-gvproxyUpgrade golang-raceUpgrade toolbox-testsUpgrade container-selinuxUpgrade delveUpgrade fuse-overlayfsUpgrade libslirpUpgrade python3-criuUpgrade podman-catatonitUpgrade criuUpgrade buildahUpgrade udicaUpgrade containers-commonUpgrade golang-srcUpgrade golang-binUpgrade libslirp-develUpgrade golang-miscUpgrade podmanUpgrade podman-remoteUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-pluginsUpgrade criu-libsUpgrade netavarkUpgrade skopeo-testsUpgrade skopeoUpgrade golangUpgrade aardvark-dns | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-binUpgrade containerdUpgrade amazon-ssm-agentUpgrade containerd-debuginfoUpgrade golang-testsUpgrade golang-raceUpgrade containerd-stressUpgrade golang-sharedUpgrade amazon-ssm-agent-debuginfoUpgrade golang-docsUpgrade dockerUpgrade golang-miscUpgrade docker-debuginfoUpgrade golang-srcUpgrade golang | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade amazon-ssm-agentUpgrade golang | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golangUpgrade golang-binUpgrade golang-srcUpgrade golang-miscUpgrade golang-docsUpgrade golang-testsUpgrade golang-raceUpgrade golang-shared | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade podman-debuginfoUpgrade udicaUpgrade netavarkUpgrade podman-remoteUpgrade podman-catatonitUpgrade skopeoUpgrade golang-binUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-testsUpgrade crunUpgrade containernetworking-pluginsUpgrade golang-docsUpgrade toolbox-testsUpgrade python3-criuUpgrade podman-catatonit-debuginfoUpgrade cockpit-podmanUpgrade toolbox-debugsourceUpgrade buildah-debugsourceUpgrade libslirp-debuginfoUpgrade skopeo-debugsourceUpgrade critUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade fuse-overlayfs-debuginfoUpgrade buildahUpgrade podmanUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade criuUpgrade podman-gvproxy-debuginfoUpgrade delve-debugsourceUpgrade podman-dockerUpgrade podman-testsUpgrade runcUpgrade runc-debugsourceUpgrade toolboxUpgrade conmon-debugsourceUpgrade toolbox-debuginfoUpgrade delve-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-gvproxyUpgrade containers-commonUpgrade golang-miscUpgrade conmon-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade golangUpgrade slirp4netns-debuginfoUpgrade go-toolsetUpgrade criu-libsUpgrade skopeo-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade crun-debugsourceUpgrade conmonUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade golang-raceUpgrade python3-podmanUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade buildah-tests-debuginfoUpgrade container-selinuxUpgrade podman-pluginsUpgrade golang-srcUpgrade delveUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade podman-plugins-debuginfoUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade aardvark-dnsUpgrade criu-debugsource | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go119Upgrade go120 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade skopeoUpgrade skopeo-testsUpgrade netavarkUpgrade python3-podmanUpgrade cockpit-podmanUpgrade libslirpUpgrade udicaUpgrade slirp4netnsUpgrade criu-develUpgrade podman-pluginsUpgrade conmonUpgrade crunUpgrade podman-testsUpgrade podman-gvproxyUpgrade delveUpgrade podman-dockerUpgrade golang-raceUpgrade criuUpgrade go-toolsetUpgrade criu-libsUpgrade critUpgrade containers-commonUpgrade podman-remoteUpgrade aardvark-dnsUpgrade container-selinuxUpgrade podmanUpgrade golang-docsUpgrade buildah-testsUpgrade python3-criuUpgrade containernetworking-pluginsUpgrade buildahUpgrade golang-srcUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade golang-testsUpgrade golang-miscUpgrade fuse-overlayfsUpgrade runcUpgrade golang-binUpgrade libslirp-develUpgrade golang | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade openshift-clientsUpgrade skopeoUpgrade openshiftUpgrade buildah | Jun 8, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade libslirpUpgrade container-selinuxUpgrade crun-debuginfoUpgrade runc-debugsourceUpgrade toolbox-testsUpgrade conmon-debuginfoUpgrade fuse-overlayfsUpgrade toolbox-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netns-debuginfoNo solution existsUpgrade podman-gvproxyUpgrade buildah-debuginfoUpgrade podman-testsUpgrade buildah-testsUpgrade conmon-debugsourceUpgrade skopeo-debugsourceUpgrade aardvark-dnsUpgrade podman-plugins-debuginfoUpgrade podman-dockerUpgrade go-toolsetUpgrade buildahUpgrade podman-gvproxy-debuginfoUpgrade python3-criuUpgrade udicaUpgrade criu-debuginfoUpgrade golang-miscUpgrade criu-debugsourceUpgrade slirp4netnsUpgrade cockpit-podmanUpgrade skopeo-debuginfoUpgrade golangUpgrade buildah-debugsourceUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade libslirp-debugsourceUpgrade podman-debugsourceUpgrade podman-remoteUpgrade netavarkUpgrade golang-testsUpgrade toolboxUpgrade golang-raceUpgrade conmonUpgrade crunUpgrade slirp4netns-debugsourceUpgrade python3-podmanUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-docsUpgrade podman-pluginsUpgrade golang-binUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade toolbox-debugsourceUpgrade runcUpgrade delve-debuginfoUpgrade delve-debugsourceUpgrade crun-debugsourceUpgrade criu-libsUpgrade critUpgrade criu-libs-debuginfoUpgrade skopeoUpgrade criuUpgrade libslirp-develUpgrade golang-srcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade podmanUpgrade containernetworking-pluginsUpgrade podman-catatonit-debuginfoUpgrade containers-commonUpgrade libslirp-debuginfoUpgrade skopeo-testsUpgrade delveUpgrade criu-develUpgrade containernetworking-plugins-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade podman-debuginfo | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade runc-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade podman-gvproxyUpgrade criu-develUpgrade delveUpgrade podman-plugins-debuginfoUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade criu-debugsourceUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade criu-libsUpgrade delve-debuginfoUpgrade slirp4netns-debugsourceUpgrade buildah-testsUpgrade libslirp-develUpgrade libslirpUpgrade podman-testsUpgrade go-toolsetUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade containernetworking-plugins-debuginfoUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade conmonUpgrade fuse-overlayfs-debugsourceUpgrade libslirp-debuginfoUpgrade golang-binUpgrade containernetworking-plugins-debugsourceUpgrade containernetworking-pluginsUpgrade criuUpgrade runcUpgrade fuse-overlayfs-debuginfoUpgrade crun-debugsourceUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade fuse-overlayfsUpgrade buildah-tests-debuginfoUpgrade golang-raceUpgrade containers-commonUpgrade buildah-debuginfoUpgrade podman-pluginsUpgrade crunUpgrade podman-debuginfoUpgrade podmanUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade delve-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade netavarkUpgrade podman-catatonit-debuginfoUpgrade critUpgrade criu-libs-debuginfoUpgrade golangUpgrade podman-remote-debuginfoUpgrade podman-remote | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20-docUpgrade go1.19Upgrade go1.20-raceUpgrade go1.19-docUpgrade go1.20Upgrade go1.19-race | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.19-goUpgrade golang-1.20Upgrade golang-1.19Upgrade golang-1.20-srcUpgrade golang-1.20-goUpgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub