Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed due to HTML normalization rules. This may allow injection of arbitrary attributes into tags.
CVSS Details
- CVSS 3.1 Base Score: 7.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python3-criuUpgrade aardvark-dnsUpgrade critUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade container-selinuxUpgrade udicaUpgrade libslirp-develUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade podman-catatonitUpgrade buildah-testsUpgrade runcUpgrade containers-commonUpgrade criu-libsUpgrade podmanUpgrade buildahUpgrade cockpit-podmanUpgrade criu-develUpgrade slirp4netnsUpgrade python3-podmanUpgrade fuse-overlayfsUpgrade conmonUpgrade podman-pluginsUpgrade crunUpgrade podman-gvproxyUpgrade toolboxUpgrade podman-testsUpgrade libslirpUpgrade toolbox-testsUpgrade podman-dockerUpgrade skopeoUpgrade netavarkUpgrade skopeo-tests | Nov 16, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade golang-miscUpgrade golang-docsUpgrade golangUpgrade containerd-stressUpgrade golang-binUpgrade golang-srcUpgrade golang-testsUpgrade golang-raceUpgrade containerd-debuginfoUpgrade golang-sharedUpgrade containerd | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golang | Jun 9, 2023 | May 11, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-miscUpgrade golang-srcUpgrade golang-raceUpgrade golangUpgrade golang-sharedUpgrade golang-binUpgrade golang-docsUpgrade golang-tests | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade toolbox-debugsourceUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade toolbox-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade golang-docsUpgrade criu-debugsourceUpgrade slirp4netns-debugsourceUpgrade udicaUpgrade golang-testsUpgrade criu-libs-debuginfoUpgrade libslirp-debuginfoUpgrade podmanUpgrade podman-debuginfoUpgrade runcUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade slirp4netns-debuginfoUpgrade container-selinuxUpgrade buildah-testsUpgrade podman-debugsourceUpgrade go-toolsetUpgrade podman-remoteUpgrade containers-commonUpgrade python3-criuUpgrade podman-catatonitUpgrade podman-plugins-debuginfoUpgrade buildahUpgrade podman-remote-debuginfoUpgrade runc-debugsourceUpgrade delve-debuginfoUpgrade critUpgrade golang-binUpgrade libslirp-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade golang-srcUpgrade aardvark-dnsUpgrade conmon-debuginfoUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade toolbox-testsUpgrade python3-podmanUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-libsUpgrade skopeoUpgrade podman-pluginsUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade delve-debugsourceUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade runc-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade buildah-debugsourceUpgrade golang-raceUpgrade golangUpgrade crun-debuginfoUpgrade conmonUpgrade slirp4netnsUpgrade toolboxUpgrade podman-gvproxyUpgrade buildah-tests-debuginfoUpgrade libslirp-develUpgrade delveUpgrade skopeo-debugsourceUpgrade libslirpUpgrade golang-miscUpgrade crunUpgrade conmon-debugsourceUpgrade criu-debuginfoUpgrade criu-develUpgrade netavark | Oct 23, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golang-develUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade criu-develUpgrade podman-remoteUpgrade containers-commonUpgrade podmanUpgrade containernetworking-pluginsUpgrade container-selinuxUpgrade criu-libsUpgrade podman-pluginsUpgrade libslirp-develUpgrade skopeoUpgrade skopeo-testsUpgrade podman-dockerUpgrade podman-catatonitUpgrade critUpgrade conmonUpgrade aardvark-dnsUpgrade crunUpgrade buildah-testsUpgrade buildahUpgrade python3-podmanUpgrade cockpit-podmanUpgrade criuUpgrade udicaUpgrade slirp4netnsUpgrade libslirpUpgrade podman-testsUpgrade podman-gvproxyUpgrade runcUpgrade fuse-overlayfsUpgrade netavarkUpgrade python3-criu | Nov 16, 2023 | Apr 20, 2023 |
| Redhat Openshift | — | Upgrade skopeoUpgrade podmanUpgrade microshiftUpgrade openshift-clientsUpgrade buildahUpgrade cri-tools | Jun 15, 2023 | Apr 20, 2023 |
| Redhat_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade fuse-overlayfsUpgrade libslirpUpgrade golang-miscUpgrade skopeo-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containers-commonUpgrade buildah-tests-debuginfoUpgrade netavarkUpgrade crun-debugsourceUpgrade buildahUpgrade oci-seccomp-bpf-hookUpgrade conmon-debugsourceUpgrade conmonUpgrade runc-debugsourceUpgrade skopeoUpgrade criu-libsUpgrade buildah-testsUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade delve-debuginfoUpgrade golang-srcUpgrade aardvark-dnsUpgrade slirp4netnsUpgrade python3-podmanUpgrade buildah-debuginfoUpgrade libslirp-develUpgrade toolboxUpgrade runc-debuginfoUpgrade podman-gvproxyUpgrade podman-catatonit-debuginfoUpgrade golang-raceUpgrade crun-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade podman-remote-debuginfoUpgrade golangUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade podman-testsUpgrade udicaUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade podman-dockerUpgrade podman-debugsourceUpgrade runcUpgrade python3-criuUpgrade podman-gvproxy-debuginfoUpgrade libslirp-debugsourceUpgrade toolbox-testsUpgrade libslirp-debuginfoUpgrade criuUpgrade golang-testsUpgrade toolbox-debugsourceUpgrade podman-catatonitUpgrade crunNo solution existsUpgrade container-selinuxUpgrade podman-pluginsUpgrade criu-libs-debuginfoUpgrade slirp4netns-debugsourceUpgrade delveUpgrade go-toolsetUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podmanUpgrade podman-debuginfoUpgrade podman-remoteUpgrade podman-plugins-debuginfoUpgrade golang-binUpgrade criu-develUpgrade critUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade conmon-debuginfoUpgrade slirp4netns-debuginfo | Oct 23, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade crun-debugsourceUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-catatonit-debuginfoUpgrade runcUpgrade podman-remote-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podmanUpgrade criuUpgrade podman-remoteUpgrade podman-debuginfoUpgrade libslirp-debuginfoUpgrade conmonUpgrade containernetworking-pluginsUpgrade buildah-tests-debuginfoUpgrade podman-pluginsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildah-debugsourceUpgrade netavarkUpgrade criu-libs-debuginfoUpgrade criu-develUpgrade crunUpgrade podman-catatonitUpgrade conmon-debugsourceUpgrade containers-commonUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade podman-gvproxyUpgrade conmon-debuginfoUpgrade libslirpUpgrade crun-debuginfoUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debuginfoUpgrade aardvark-dnsUpgrade criu-debugsourceUpgrade buildah-testsUpgrade podman-plugins-debuginfoUpgrade criu-libsUpgrade runc-debugsourceUpgrade podman-debugsourceUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade podman-testsUpgrade buildahUpgrade runc-debuginfoUpgrade slirp4netns-debugsource | Dec 1, 2025 | Nov 28, 2025 |
| Suse | — | Upgrade go1.19-raceUpgrade go1.20Upgrade go1.19-docUpgrade go1.20-docUpgrade go1.20-raceUpgrade go1.19 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20-goUpgrade golang-1.20Upgrade golang-1.19-goUpgrade golang-1.20-srcUpgrade golang-1.19Upgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub