Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f\r\u0020\u2028\u2029" in JavaScript contexts that also contain actions may not be properly sanitized during execution.
CVSS Details
- CVSS 3.1 Base Score: 9.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade containernetworking-pluginsUpgrade golang-srcUpgrade golang-miscUpgrade netavarkUpgrade containers-commonUpgrade golangUpgrade skopeoUpgrade golang-binUpgrade skopeo-testsUpgrade criu-libsUpgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade podman-remoteUpgrade aardvark-dnsUpgrade libslirp-develUpgrade conmonUpgrade buildahUpgrade podman-testsUpgrade fuse-overlayfsUpgrade podman-catatonitUpgrade golang-raceUpgrade container-selinuxUpgrade python3-criuUpgrade podman-pluginsUpgrade delveUpgrade podman-gvproxyUpgrade libslirpUpgrade toolbox-testsUpgrade crunUpgrade python3-podmanUpgrade criuUpgrade cockpit-podmanUpgrade golang-docsUpgrade golang-testsUpgrade critUpgrade go-toolsetUpgrade criu-develUpgrade podman-dockerUpgrade udicaUpgrade buildah-testsUpgrade runcUpgrade slirp4netnsUpgrade toolbox | May 29, 2023 | May 11, 2023 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | May 11, 2023 |
| Amazon Linux Ami 2 | — | Upgrade containerd-debuginfoUpgrade containerd-stressUpgrade containerdUpgrade amazon-ssm-agentUpgrade golang-docsUpgrade amazon-ssm-agent-debuginfoUpgrade golang-sharedUpgrade golang-raceUpgrade golang-testsUpgrade golang-binUpgrade golang-srcUpgrade golangUpgrade dockerUpgrade golang-miscUpgrade docker-debuginfo | Jul 27, 2023 | May 11, 2023 |
| Amazon_linux | — | Upgrade golangUpgrade amazon-ssm-agent | Jun 9, 2023 | May 5, 2023 |
| Amazon_linux_2023 | — | Upgrade golang-raceUpgrade golang-sharedUpgrade golang-testsUpgrade golang-docsUpgrade golang-miscUpgrade golang-binUpgrade golangUpgrade golang-src | Feb 17, 2025 | Apr 20, 2023 |
| Centos_linux | — | Upgrade cockpit-podmanUpgrade crunUpgrade buildahUpgrade python3-criuUpgrade podman-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-pluginsUpgrade libslirp-debuginfoUpgrade toolbox-testsUpgrade toolbox-debugsourceUpgrade golang-testsUpgrade toolboxUpgrade podmanUpgrade netavarkUpgrade critUpgrade skopeoUpgrade conmon-debugsourceUpgrade criu-libs-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-docsUpgrade podman-catatonitUpgrade podman-catatonit-debuginfoUpgrade libslirp-debugsourceUpgrade buildah-testsUpgrade podman-remoteUpgrade skopeo-debugsourceUpgrade udicaUpgrade buildah-debuginfoUpgrade podman-gvproxy-debuginfoUpgrade golang-binUpgrade criuUpgrade delve-debugsourceUpgrade runcUpgrade podman-dockerUpgrade runc-debugsourceUpgrade podman-testsUpgrade fuse-overlayfsUpgrade toolbox-debuginfoUpgrade aardvark-dnsUpgrade python3-podmanUpgrade slirp4netnsUpgrade golang-raceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade golang-srcUpgrade containernetworking-plugins-debuginfoUpgrade delveUpgrade podman-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netns-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade criu-debuginfoUpgrade golangUpgrade skopeo-testsUpgrade delve-debuginfoUpgrade crun-debuginfoUpgrade criu-develUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade criu-libsUpgrade conmon-debuginfoUpgrade go-toolsetUpgrade skopeo-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-pluginsUpgrade golang-miscUpgrade criu-debugsourceUpgrade containers-commonUpgrade podman-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debugsourceUpgrade container-selinuxUpgrade buildah-tests-debuginfoUpgrade conmonUpgrade crun-debugsourceUpgrade podman-gvproxyUpgrade libslirp | May 29, 2023 | May 11, 2023 |
| Debian | — | No solution exists | May 15, 2025 | May 11, 2023 |
| Freebsd | — | Upgrade go120Upgrade go119 | Aug 3, 2023 | Aug 2, 2023 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 8, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Jul 18, 2023 | May 11, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade golang-develUpgrade golangUpgrade golang-help | Jan 10, 2024 | May 11, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-develUpgrade golang-helpUpgrade golang | Aug 9, 2023 | May 11, 2023 |
| Oracle_linux | — | Upgrade criuUpgrade udicaUpgrade skopeo-testsUpgrade delveUpgrade criu-develUpgrade podman-dockerUpgrade skopeoUpgrade podman-gvproxyUpgrade cockpit-podmanUpgrade crunUpgrade libslirpUpgrade golang-raceUpgrade python3-podmanUpgrade podman-pluginsUpgrade slirp4netnsUpgrade podman-testsUpgrade netavarkUpgrade conmonUpgrade golangUpgrade python3-criuUpgrade buildah-testsUpgrade golang-docsUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade critUpgrade containers-commonUpgrade buildahUpgrade podman-remoteUpgrade criu-libsUpgrade aardvark-dnsUpgrade container-selinuxUpgrade podmanUpgrade golang-binUpgrade golang-srcUpgrade libslirp-develUpgrade go-toolsetUpgrade golang-testsUpgrade runcUpgrade golang-miscUpgrade fuse-overlayfsUpgrade oci-seccomp-bpf-hook | May 26, 2023 | Apr 20, 2023 |
| Rapid7 Scan Assistant | — | Upgrade to the latest version of Rapid7 InsightVM Scan Assistant | Jan 3, 2024 | May 11, 2023 |
| Redhat Openshift | — | Upgrade podmanUpgrade skopeoUpgrade openshiftUpgrade openshift-clientsUpgrade buildah | Jun 8, 2023 | May 11, 2023 |
| Redhat_linux | — | Upgrade buildahUpgrade podman-gvproxy-debuginfoNo solution existsUpgrade criu-debugsourceUpgrade podman-gvproxyUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade podman-testsUpgrade python3-criuUpgrade container-selinuxUpgrade podman-plugins-debuginfoUpgrade crun-debuginfoUpgrade golang-miscUpgrade podman-dockerUpgrade runc-debugsourceUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade slirp4netnsUpgrade libslirpUpgrade slirp4netns-debuginfoUpgrade skopeo-debugsourceUpgrade toolbox-debuginfoUpgrade skopeo-debuginfoUpgrade buildah-tests-debuginfoUpgrade aardvark-dnsUpgrade go-toolsetUpgrade golangUpgrade criu-debuginfoUpgrade buildah-testsUpgrade udicaUpgrade conmon-debugsourceUpgrade golang-binUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criuUpgrade netavarkUpgrade fuse-overlayfs-debugsourceUpgrade toolboxUpgrade toolbox-debugsourceUpgrade podman-remote-debuginfoUpgrade crunUpgrade runc-debuginfoUpgrade delveUpgrade criu-libsUpgrade containernetworking-pluginsUpgrade critUpgrade delve-debugsourceUpgrade libslirp-debuginfoUpgrade golang-srcUpgrade golang-docsUpgrade libslirp-develUpgrade buildah-debugsourceUpgrade podman-debugsourceUpgrade podman-catatonit-debuginfoUpgrade golang-raceUpgrade criu-develUpgrade runcUpgrade podman-debuginfoUpgrade criu-libs-debuginfoUpgrade golang-testsUpgrade crun-debugsourceUpgrade delve-debuginfoUpgrade python3-podmanUpgrade libslirp-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonitUpgrade containers-commonUpgrade podmanUpgrade oci-seccomp-bpf-hookUpgrade conmonUpgrade skopeo-testsUpgrade slirp4netns-debugsourceUpgrade skopeoUpgrade containernetworking-plugins-debuginfoUpgrade podman-remoteUpgrade containernetworking-plugins-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-plugins | May 29, 2023 | May 11, 2023 |
| Rocky_linux | — | Upgrade python3-criuUpgrade criu-libsUpgrade podman-gvproxyUpgrade podman-gvproxy-debuginfoUpgrade podman-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade slirp4netnsUpgrade go-toolsetUpgrade buildah-testsUpgrade slirp4netns-debuginfoUpgrade criu-debugsourceUpgrade libslirp-develUpgrade crun-debuginfoUpgrade libslirp-debugsourceUpgrade podman-testsUpgrade podman-plugins-debuginfoUpgrade aardvark-dnsUpgrade buildahUpgrade conmonUpgrade conmon-debuginfoUpgrade criu-develUpgrade delveUpgrade libslirpUpgrade runc-debugsourceUpgrade netavarkUpgrade containernetworking-plugins-debugsourceUpgrade conmon-debugsourceUpgrade podman-pluginsUpgrade golang-binUpgrade containernetworking-pluginsUpgrade podman-remote-debuginfoUpgrade podman-remoteUpgrade podman-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podmanUpgrade containers-commonUpgrade buildah-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade criuUpgrade runcUpgrade fuse-overlayfs-debugsourceUpgrade crun-debugsourceUpgrade criu-libs-debuginfoUpgrade critUpgrade podman-catatonitUpgrade golang-raceUpgrade buildah-tests-debuginfoUpgrade golangUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade podman-catatonit-debuginfoUpgrade crunUpgrade delve-debugsourceUpgrade criu-debuginfoUpgrade libslirp-debuginfo | Mar 5, 2024 | May 11, 2023 |
| Suse | — | Upgrade go1.20-docUpgrade go1.19Upgrade go1.19-docUpgrade go1.20-raceUpgrade go1.19-raceUpgrade go1.20 | May 8, 2023 | May 5, 2023 |
| Ubuntu | — | Upgrade golang-1.20Upgrade golang-1.19-goUpgrade golang-1.19Upgrade golang-1.20-goUpgrade golang-1.20-srcUpgrade golang-1.19-src | Jun 7, 2023 | May 11, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub