Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-3978

20
FAUCET Score

CVE-2023-3978 is a cross-site scripting (XSS) vulnerability affecting GoLang networking, where text nodes outside the HTML namespace are improperly rendered, leading to unescaped text. This medium-severity vulnerability (CVSS 6.1) requires user interaction and network access, potentially resulting in low impact to confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.

Impacted Technologies

VendorProductVersion(s)CPE
< 0.13.0CPE matchmatch criteria
cpe:2.3:a:golang:networking:*:*:*:*:*:go:*:*

CVSS Data

CVSS version used by this source: 3.1

6.1MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
Exploitability Score
2.8
Impact Score
2.7
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.84%
Probability of exploitation in next 30 days
EPSS Percentile
54.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0084 is in the 64th percentile among its peer group of 26,219 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (192)

gopatch availablevia ghsa
Product: golang.org/x/netFixed in: 0.13.0
mediatekpatch availablevia llm_extracted
Fixed in: 9.3.1, 9.2.3, 9.1.6
microsoftpatch availablevia msrc
Product: azl3 application-gateway-kubernetes-ingress 1.7.2-3 on Azure Linux 3.0Fixed in: 1.7.7-1
microsoftpatch availablevia msrc
Product: azl3 application-gateway-kubernetes-ingress 1.7.7-1 on Azure Linux 3.0Fixed in: 1.7.7-1
microsoftpatch availablevia msrc
Product: azl3 containerized-data-importer 1.57.0-14 on Azure Linux 3.0Fixed in: 1.57.0-12
microsoftpatch availablevia msrc
Product: azl3 containerized-data-importer 1.57.0-12 on Azure Linux 3.0Fixed in: 1.57.0-12
microsoftpatch availablevia msrc
Product: azl3 kubevirt 0.59.0-14 on Azure Linux 3.0Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: azl3 kubevirt 1.2.0-1 on Azure Linux 3.0Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: azl3 prometheus-adapter 0.11.2-1 on Azure Linux 3.0Fixed in: 0.12.0-1
microsoftpatch availablevia msrc
Product: azl3 prometheus-adapter 0.12.0-1 on Azure Linux 3.0Fixed in: 0.12.0-1
microsoftpatch availablevia msrc
Product: azl3 telegraf 1.27.3-4 on Azure Linux 3.0Fixed in: 1.29.4-1
microsoftpatch availablevia msrc
Product: azl3 telegraf 1.29.4-1 on Azure Linux 3.0Fixed in: 1.29.4-1
microsoftpatch availablevia msrc
Product: azl3 vitess 17.0.2-1 on Azure Linux 3.0Fixed in: 19.0.4-2
microsoftpatch availablevia msrc
Product: azl3 vitess 19.0.4-2 on Azure Linux 3.0Fixed in: 19.0.4-2
microsoftpatch availablevia msrc
Product: cbl2 packer 1.9.5-3 on CBL Mariner 2.0Fixed in: 1.9.5-3
microsoftpatch availablevia msrc
Product: cbl2 multus 4.0.2-5 on CBL Mariner 2.0Fixed in: 4.0.2-5
microsoftpatch availablevia msrc
Product: cbl2 cni-plugins 1.3.0-6 on CBL Mariner 2.0Fixed in: 1.3.0-6
microsoftpatch availablevia msrc
Product: cbl2 telegraf 1.27.4-1 on CBL Mariner 2.0Fixed in: 1.27.4-1
microsoftpatch availablevia msrc
Product: cbl2 vitess 17.0.7-1 on CBL Mariner 2.0Fixed in: 17.0.7-1
microsoftpatch availablevia msrc
Product: cbl2 kubevirt 0.59.0-24 on CBL Mariner 2.0Fixed in: 0.59.0-24
microsoftpatch availablevia msrc
Product: cbl2 cert-manager 1.11.2-14 on CBL Mariner 2.0Fixed in: 1.11.2-14
microsoftpatch availablevia msrc
Product: azl3 multus 4.0.2-2 on Azure Linux 3.0Fixed in: 4.0.2-2
microsoftpatch availablevia msrc
Product: azl3 multus 4.0.2-5 on Azure Linux 3.0Fixed in: 4.0.2-2
microsoftpatch availablevia msrc
Product: azl3 cert-manager 1.12.12-1 on Azure Linux 3.0Fixed in: 1.12.12-1
microsoftpatch availablevia msrc
Product: azl3 cert-manager 1.11.2-8 on Azure Linux 3.0Fixed in: 1.12.12-1
microsoftpatch availablevia msrc
Product: 19928-17086Fixed in: 1.10.1-1
microsoftpatch availablevia msrc
Product: 17515-17084Fixed in: 1.7.7-1
microsoftpatch availablevia msrc
Product: 17587-17084Fixed in: 1.7.7-1
microsoftpatch availablevia msrc
Product: 19346-17084Fixed in: 1.57.0-12
microsoftpatch availablevia msrc
Product: 18190-17084Fixed in: 1.57.0-12
microsoftpatch availablevia msrc
Product: 19959-17084Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: 18189-17084Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: 19966-17084Fixed in: 0.12.0-1
microsoftpatch availablevia msrc
Product: 17786-17084Fixed in: 0.12.0-1
microsoftpatch availablevia msrc
Product: 19664-17084Fixed in: 1.29.4-1
microsoftpatch availablevia msrc
Product: 18164-17084Fixed in: 1.29.4-1
microsoftpatch availablevia msrc
Product: 19970-17084Fixed in: 19.0.4-2
microsoftpatch availablevia msrc
Product: 16898-17084Fixed in: 19.0.4-2
microsoftpatch availablevia msrc
Product: 18130-16823Fixed in: 1.9.5-3
microsoftpatch availablevia msrc
Product: 18184-16823Fixed in: 4.0.2-5
microsoftpatch availablevia msrc
Product: 18185-16823Fixed in: 1.3.0-6
microsoftpatch availablevia msrc
Product: 18186-16823Fixed in: 1.27.4-1
microsoftpatch availablevia msrc
Product: 17341-16823Fixed in: 17.0.7-1
microsoftpatch availablevia msrc
Product: 18187-16823Fixed in: 0.59.0-24
microsoftpatch availablevia msrc
Product: 17402-16823Fixed in: 1.11.2-14
microsoftpatch availablevia msrc
Product: 18188-17084Fixed in: 4.0.2-2
microsoftpatch availablevia msrc
Product: 19345-17084Fixed in: 4.0.2-2
microsoftpatch availablevia msrc
Product: 17766-17084Fixed in: 1.12.12-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.11.2-14
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 4.0.2-5
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.11.2-14
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 4.0.2-5
microsoftpatch availablevia msrc
Product: 19863-17084Fixed in: 1.12.12-1
microsoftpatch availablevia msrc
Product: cbl2 packer 1.8.7-2 on CBL Mariner 2.0Fixed in: 1.10.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.10.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.27.4-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 1.12.12-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 4.0.2-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 x64Fixed in: 0.12.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 1.12.12-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 1.2.0-1
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 4.0.2-2
microsoftpatch availablevia msrc
Product: Azure Linux 3.0 ARMFixed in: 0.12.0-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.3.0-6
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.3.0-6
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.10.1-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.27.4-1
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 1.11.2-15
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 ARMFixed in: 4.0.2-6
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 1.11.2-15
microsoftpatch availablevia msrc
Product: CBL Mariner 2.0 x64Fixed in: 4.0.2-6
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-aws-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g3e23a96.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-velero-rhel8:v1.7.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-velero-plugin-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.12Fixed in: openshift4/ose-machine-api-operator:v4.12.0-202401190520.p0.g04504fb.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-aws-ebs-csi-driver-rhel8:v4.14.0-202310201027.p0.g2e2e277.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-azure-disk-csi-driver-rhel8:v4.14.0-202310201027.p0.gb19eec1.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-azure-file-csi-driver-rhel8:v4.14.0-202310201027.p0.gf401f53.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-baremetal-machine-controllers:v4.14.0-202310201027.p0.g412acb3.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-cluster-network-operator:v4.14.0-202310201027.p0.g5572bce.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-cluster-node-tuning-operator:v4.14.0-202310201027.p0.ga91f994.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-machine-api-provider-gcp-rhel8:v4.14.0-202310201027.p0.ga676e6b.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-powervs-block-csi-driver-rhel8:v4.14.0-202310201027.p0.ge9694ce.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-vsphere-csi-driver-syncer-rhel8:v4.14.0-202310201027.p0.ga5ed57f.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-aws-efs-csi-driver-container-rhel8:v4.14.0-202310201027.p0.g66925fd.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-csi-external-provisioner:v4.14.0-202310201027.p0.g78a710f.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-csi-external-provisioner-rhel8:v4.14.0-202310201027.p0.g78a710f.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-local-storage-operator:v4.14.0-202310201027.p0.gc41b6ba.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift-clients-0:4.14.0-202310191146.p0.g0c63f9d.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-azure-cluster-api-controllers-rhel8:v4.14.0-202311021650.p0.g7ad2773.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-machine-api-provider-aws-rhel8:v4.14.0-202311021650.p0.ge292817.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-machine-api-provider-azure-rhel8:v4.14.0-202311021650.p0.gb6ab233.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-vsphere-cluster-api-controllers-rhel8:v4.14.0-202311021650.p0.g72e998c.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-gcp-cluster-api-controllers-rhel8:v4.14.0-202311080350.p0.gd99fb31.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-machine-api-operator:v4.14.0-202311130809.p0.ge8e6a66.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: podman-3:4.4.1-11.2.rhaos4.14.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-nutanix-cloud-controller-manager-rhel8:v4.14.0-202411261536.p0.g8aa09cd.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-nutanix-machine-controllers-rhel8:v4.14.0-202411261536.p0.g8acc076.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.14Fixed in: openshift4/ose-kubevirt-cloud-controller-manager-rhel8:v4.14.0-202404161544.p0.g7d96f56.assembly.stream.el8
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-sriov-network-webhook-rhel9:v4.15.0-202401261531.p0.g00e0317.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-alibaba-cloud-controller-manager-rhel9:v4.15.0-202401261531.p0.gabf4fa9.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-velero-restic-restore-helper-rhel8:v1.7.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-azure-cloud-node-manager-rhel9:v4.15.0-202401261531.p0.g5beac87.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-azure-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g84ef752.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-api-rhel9:v4.15.0-202401261531.p0.gdb1841a.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-capi-rhel9-operator:v4.15.0-202402020339.p0.g6a24e09.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-control-plane-machine-set-rhel9-operator:v4.15.0-202401261531.p0.gd3e0fe7.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-cluster-kube-cluster-api-rhel9-operator:v4.15.0-202402141438.p0.g128d8e0.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-gcp-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.g8a32c37.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-ibmcloud-machine-controllers-rhel9:v4.15.0-202401261531.p0.g6b0b8ea.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-machine-api-provider-aws-rhel9:v4.15.0-202401261531.p0.g0129b1e.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-machine-api-provider-azure-rhel9:v4.15.0-202402070237.p0.g34e8ac0.assembly.stream.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-machine-api-provider-gcp-rhel9:v4.15.0-202401261531.p0.gb15daaf.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-machine-api-rhel9-operator:v4.15.0-202402020339.p0.ge2b4537.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Container Platform 4.15Fixed in: openshift4/ose-vsphere-cluster-api-controllers-rhel9:v4.15.0-202401261531.p0.gb21c0ba.assembly.stream
View patch
redhatpatch availablevia redhat_api
Product: Red Hat OpenShift Service Mesh 2.4 for RHEL 8Fixed in: openshift-service-mesh/istio-cni-rhel8:2.4.5-2
View patch
redhatpatch availablevia redhat_api
Product: RHODF-4.14-RHEL-9Fixed in: odf4/ocs-rhel9-operator:v4.14.0-67
View patch
redhatpatch availablevia redhat_api
Product: Cryostat 2 on RHEL 8Fixed in: cryostat-tech-preview/cryostat-rhel8-operator:2.3.1-11
View patch
redhatpatch availablevia redhat_api
Product: Migration Toolkit for Virtualization 2.4Fixed in: migration-toolkit-virtualization/mtv-rhel8-operator:2.4.3-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:4.0-8090020230828093056.e7857ab1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: container-tools:rhel8-8090020230825121312.e7857ab1
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: podman-2:4.6.1-5.el9
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-controller-rhel8:v1.7.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-hook-runner-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-legacy-rhel8-operator:v1.7.13-6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-log-reader-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-must-gather-rhel8:v1.7.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-openvpn-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-operator-bundle:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-registry-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-rhel8-operator:v1.7.13-6
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-rsync-transfer-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-ui-rhel8:v1.7.13-4
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-velero-plugin-for-aws-rhel8:v1.7.13-3
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-velero-plugin-for-gcp-rhel8:v1.7.13-2
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Migration Toolkit for Containers 1.7Fixed in: rhmtc/openshift-migration-velero-plugin-for-microsoft-azure-rhel8:v1.7.13-3
View patch
ubuntupatch availablevia ubuntu_usn
Product: golang-golang-x-net (noble)Fixed in: 1:0.21.0+dfsg-1ubuntu0.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: lxd (bionic)Fixed in: 3.0.3-0ubuntu1~18.04.2+esm2
ubuntupatch availablevia ubuntu_usn
Product: adsys (focal)Fixed in: 0.9.2~20.04.2ubuntu0.1+esm1
ubuntupatch availablevia ubuntu_usn
Product: juju-core (xenial)Fixed in: 2.3.7-0ubuntu0.16.04.1+esm2
ubuntupatch availablevia ubuntu_usn
Product: lxd (xenial)Fixed in: 2.0.11-0ubuntu1~16.04.4+esm2
ubuntupatch availablevia ubuntu_usn
Product: golang-golang-x-net-dev (bionic)Fixed in: 1:0.0+git20170629.c81e7f2+dfsg-2ubuntu0.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: golang-golang-x-net-dev (focal)Fixed in: 1:0.0+git20190811.74dc4d7+dfsg-1ubuntu0.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: golang-golang-x-net-dev (xenial)Fixed in: 1:0.0+git20160110.4fd4a9f-1ubuntu0.1~esm2
ubuntupatch availablevia ubuntu_usn
Product: golang-golang-x-net (jammy)Fixed in: 1:0.0+git20211209.491a49a+dfsg-1ubuntu0.1~esm2
redhatvendor investigatingvia redhat_api
Product: OpenShift Developer Tools and ServicesFixed in: odo
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-hypershift-rhel9
redhatno patchvia redhat_api
Product: OpenShift PipelinesFixed in: openshift-pipelines-client
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Management for Kubernetes 2Fixed in: rhacm2/subctl-rhel8
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/cephcsi-rhel9
redhatno patchvia redhat_api
Product: Red Hat Advanced Cluster Security 4Fixed in: advanced-cluster-security/rhacs-main-rhel8
redhatno patchvia redhat_api
Product: Red Hat Ansible Automation Platform 2Fixed in: openshift-clients
redhatno patchvia redhat_api
Product: Red Hat Openshift Data Foundation 4Fixed in: odf4/odf-rhel9-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-tests
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ztp-site-generate-rhel8
redhatno patchvia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/devspaces-rhel8-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift-compliance-openscap-container
redhatno patchvia redhat_api
Product: Red Hat OpenShift on AWSFixed in: rosa
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/kubernetes-nmstate-rhel8-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: kubevirt
redhatno patchvia redhat_api
Product: Red Hat OpenShift Virtualization 4Fixed in: openshift-golang-builder-container
redhatno patchvia redhat_api
Product: Self Node Remediation OperatorFixed in: workload-availability/self-node-remediation-rhel8-operator
redhatno patchvia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift-selinuxd-container
redhatno patchvia redhat_api
Product: Logical Volume Manager StorageFixed in: lvms4/lvms-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-agent-installer-api-server-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-agent-installer-node-agent-rhel9
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-alibaba-machine-controllers-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-cloud-event-proxy-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-installer
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-libvirt-machine-controllers
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-network-metrics-daemon-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-node-feature-discovery
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-oauth-proxy
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-operator-sdk-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-ptp-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift-tech-preview/metallb-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Data Science (RHODS)Fixed in: rhods/odh-data-science-pipelines-operator-controller-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Data Science (RHODS)Fixed in: rhods/odh-modelmesh-serving-controller-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Dev SpacesFixed in: devspaces/udi-rhel8
redhatend of lifevia redhat_api
Product: OpenShift API for Data ProtectionFixed in: oadp/oadp-rhel8-operator
redhatend of lifevia redhat_api
Product: OpenShift API for Data ProtectionFixed in: oadp/oadp-velero-rhel9
redhatend of lifevia redhat_api
Product: Red Hat Advanced Cluster Security 3Fixed in: advanced-cluster-security/rhacs-scanner-rhel8
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 8Fixed in: osbuild-composer
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 9Fixed in: osbuild-composer
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: microshift
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/cloud-event-proxy-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/cnf-tests-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/metallb-rhel8
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/metallb-rhel9-operator
redhatend of lifevia redhat_api
Product: Red Hat OpenShift Container Platform 4Fixed in: openshift4/ose-agent-installer-csr-approver-rhel9

Vendor Advisories (10)

ubuntuUSN-8089-3

ADSys, Juju Core, LXD vulnerabilities

Apr 7, 2026
ubuntuUSN-8089-2

Go Networking vulnerabilities

Mar 31, 2026
ubuntuUSN-8089-1

Go Networking vulnerabilities

Mar 12, 2026
microsoft2024-Dec/CVE-2023-3978

CVE-2023-3978

Dec 10, 2024
microsoft2024-Nov/CVE-2023-3978

CVE-2023-3978

Nov 12, 2024
mediatekllm-mediatek-5bd731d14163992dHIGH

Third-Party Package Updates in Splunk Enterprise - October 2024

Oct 14, 2024
microsoft2024-Oct/CVE-2023-3978

CVE-2023-3978

Oct 8, 2024
microsoft2023-Aug/CVE-2023-3978Moderate

Improper rendering of text nodes in golang.org/x/net/html

Aug 8, 2023
goGHSA-2wrh-6pvc-2jm9medium

Improper rendering of text nodes in golang.org/x/net/html

Aug 2, 2023
redhatCVE-2023-3978Moderate

golang.org/x/net/html: Cross site scripting

Aug 2, 2023

References

go.dev / cl/514896
Patch
go.dev / issue/61615
Issue TrackingPatchVendor Advisory
pkg.go.dev / vuln/GO-2023-1988
Issue TrackingPatchVendor Advisory