Fluid Attacks Database

Description

The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
debian 11	golang-1.15	=1.15.15-1 \|\| =1.15.15-1~deb11u1 \|\| =1.15.15-1~deb11u2 \|\| =1.15.15-1~deb11u3 \|\| =1.15.15-1~deb11u4 \|\| =1.15.15-2 \|\| =1.15.15-3 \|\| =1.15.15-4 \|\| =1.15.15-5 \|\| =1.15.9-6	-
debian 12	golang-1.19	=1.19.10-1 \|\| =1.19.10-2 \|\| =1.19.11-1 \|\| =1.19.12-1 \|\| =1.19.12-2 \|\| =1.19.12-2~bpo11+1 \|\| =1.19.12-2~bpo12+1 \|\| =1.19.13-1 \|\| =1.19.13-1~bpo11+1 \|\| =1.19.13-1~bpo12+1 \|\| =1.19.8-2 \|\| =1.19.9-1	-
go	stdlib	>=0 <1.20.8	1.20.8
rpm rhel9	containernetworking-plugins	<1:1.3.0-6.el9_3	1:1.3.0-6.el9_3
rpm rhel9	buildah	<1:1.31.3-2.el9_3	1:1.31.3-2.el9_3
rpm rhel9	skopeo	<2:1.13.3-3.el9_3	2:1.13.3-3.el9_3
rpm rhel9	podman	<2:4.6.1-7.el9_3	2:4.6.1-7.el9_3
rpm rhel8	go-toolset	<0:1.20.10-1.module+el8.9.0+20382+04f7fe80	0:1.20.10-1.module+el8.9.0+20382+04f7fe80
rpm rhel9	golang	<0:1.20.10-1.el9_3	0:1.20.10-1.el9_3
rpm rhel9	ignition	-	-

1-10 of 13

Aliases

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.