TI-2022-15177 CVE-2022-34265 · GHSA-p64x-8rxx-wf6q
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.
Priority HIGH 80
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.
RHSA-2022:8506
Satellite 6.12 Release
Released 2022-11-16 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.12 for RHEL 8 candlepin-4.1.15-1.el8sat, candlepin-selinux-4.1.15-1.el8sat, foreman-3.3.0.17-1.el8sat +19
Fixes 10 records
TI-2022-11724 CVE-2022-29181 · GHSA-xh29-r2w5-wx8m
Improper Handling of Unexpected Data Type in Nokogiri
Priority HIGH 75
Nokogiri is an open source XML and HTML library for Ruby.
TI-2022-09232 CVE-2022-25648 · GHSA-69p6-wvmq-27gg
Command injection in git
Priority MEDIUM 50
The package git before 1.11.0 are vulnerable to Command Injection via git argument injection.
TI-2022-13919 CVE-2022-32209 · GHSA-pg8v-g4xq-hww9
Cross-site scripting in https://github.com/rails/rails-html-sanitizer
Priority MEDIUM 49
# Possible XSS Vulnerability in Rails::Html::SanitizerThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.This vulnerability has been assigned the CVE identifier CVE-2022-32209.Ver…
TI-2021-15209 CVE-2021-37137 · GHSA-9vjp-v76f-g363
Uncontrolled resource consumption in Netty
Priority MEDIUM 48
The Snappy frame decoder function doesn't restrict the chunk length which may lead to excessive memory usage.
TI-2021-15208 CVE-2021-37136 · GHSA-grg4-wf29-r9vv
Uncontrolled resource consumption in Netty
Priority MEDIUM 48
The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).
TI-2024-06363 CVE-2024-6861 · GHSA-q5h7-2qmh-rxhr
Foreman: foreman: oauth secret exposure via unauthenticated access to the graphql api
Priority MEDIUM 40
A disclosure of sensitive information flaw was found in foreman via the GraphQL API.
TI-2022-08648 CVE-2022-24836 · GHSA-crjr-9rc5-ghw8
Inefficient Regular Expression Complexity in Nokogiri
Priority LOW 39
Nokogiri is an open source XML and HTML library for Ruby.
TI-2022-12310 CVE-2022-29970 · GHSA-qp49-3pvw-x4m5
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
Priority LOW 37
Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files.
TI-2022-07062 CVE-2022-22818 · GHSA-95rw-fx8r-36v6
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0…
Priority LOW 33
The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context.