Every CVE Search/ Get API key

CVE-2022-25857

Denial of Service (DoS)

7.5 HighFix available

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.93%Up 2.0 points since Aug 30, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.5

Denial of Service (DoS)

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
CVE-2022-25857
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
EUVDEUVD-2022-6470 7.5

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
EUVD-2022-6470
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-3mc7-4q67-w48m 7.5

Uncontrolled Resource Consumption in snakeyaml

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
GHSA-3mc7-4q67-w48m
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-776
Updated
2026-11-02
NVD 7.5

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
CVE-2022-25857
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-776
Updated
2026-11-02
OSV 7.5

Denial of Service (DoS)

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
CVE-2022-25857
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-25857 7.5

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
DEBIAN-CVE-2022-25857
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
Show 47 moreShow less
OSVGHSA-3mc7-4q67-w48m 7.5

Uncontrolled Resource Consumption in snakeyaml

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
GHSA-3mc7-4q67-w48m
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400, CWE-776
Updated
2026-11-02
OSVOESA-2023-1162 7.5

snakeyaml security update

SnakeYAML is a YAML parser and emitter for the Java Virtual Machine. YAML is a data serialization format designed for human readability and interaction with scripting languages.

Security Fix(es):

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.(CVE-2022-25857)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38749)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38750)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38751)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.(CVE-2022-38752)

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.(CVE-2022-41854)

Record
OESA-2023-1162
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1163 7.5

snakeyaml security update

SnakeYAML is a YAML parser and emitter for the Java Virtual Machine. YAML is a data serialization format designed for human readability and interaction with scripting languages.

Security Fix(es):

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.(CVE-2022-25857)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38749)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38750)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38751)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.(CVE-2022-38752)

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.(CVE-2022-41854)

Record
OESA-2023-1163
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1164 7.5

snakeyaml security update

SnakeYAML is a YAML parser and emitter for the Java Virtual Machine. YAML is a data serialization format designed for human readability and interaction with scripting languages.

Security Fix(es):

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.(CVE-2022-25857)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38749)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38750)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38751)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.(CVE-2022-38752)

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.(CVE-2022-41854)

Record
OESA-2023-1164
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVOESA-2023-1165 7.5

snakeyaml security update

SnakeYAML is a YAML parser and emitter for the Java Virtual Machine. YAML is a data serialization format designed for human readability and interaction with scripting languages.

Security Fix(es):

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.(CVE-2022-25857)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38749)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38750)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow.(CVE-2022-38751)

Using snakeYAML to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack-overflow.(CVE-2022-38752)

Those using Snakeyaml to parse untrusted YAML files may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stack overflow. This effect may support a denial of service attack.(CVE-2022-41854)

Record
OESA-2023-1165
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHLW-2026-c782a5bb98e3a176 8.3

Lightwell Security Advisory: snakeyaml 1.29.0.rhlw-00021

Red Hat Lightwell has released org.yaml:snakeyaml 1.29.0.rhlw-00021 with backported fixes for CVE-2022-1471, CVE-2022-25857, CVE-2022-38749, CVE-2022-38750, CVE-2022-38751, CVE-2022-38752, and CVE-2022-41854.

CVE-2022-1471: Remote Code execution in SnakeYAML

CVE-2022-25857: Denial of Service (DoS)

CVE-2022-38749: DoS in SnakeYAML

CVE-2022-38750: DoS in SnakeYAML

CVE-2022-38751: DoS in SnakeYAML

CVE-2022-38752: DoS in SnakeYAML

CVE-2022-41854: Stack Overflow in Snakeyaml

This patched artifact is a drop-in replacement for org.yaml:snakeyaml 1.29.0 from Maven Central.

Record
RHLW-2026-c782a5bb98e3a176
CVSS 3.1
8.3 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVRHSA-2022:6820 7.5

Red Hat Security Advisory: prometheus-jmx-exporter security update

Record
RHSA-2022:6820
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6821 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update

Record
RHSA-2022:6821
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6822 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update

Record
RHSA-2022:6822
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2022:6823 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4.7 Security update

Record
RHSA-2022:6823
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:0560 9.9

Red Hat Security Advisory: OpenShift Container Platform 4.10.51 security update

Record
RHSA-2023:0560
CVSS 3.1
9.9 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:0777 9.9

Red Hat Security Advisory: OpenShift Container Platform 4.9.56 security update

Record
RHSA-2023:0777
CVSS 3.1
9.9 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1043 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7

Record
RHSA-2023:1043
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1044 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8

Record
RHSA-2023:1044
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:1045 9.8

Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9

Record
RHSA-2023:1045
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:2097 9.8

Red Hat Security Advisory: Satellite 6.13 Release

Record
RHSA-2023:2097
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:3198 9.9

Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

Record
RHSA-2023:3198
CVSS 3.1
9.9 CriticalCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6172 9.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.12 Openshift Jenkins security update

Record
RHSA-2023:6172
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:6179 9.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.13 OpenShift Jenkins security update

Record
RHSA-2023:6179
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:7288 9.8

Red Hat Security Advisory: Red Hat Product OCP Tools 4.14 Openshift Jenkins security update

Record
RHSA-2023:7288
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:0776 9.8

Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

Record
RHSA-2024:0776
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:0777 9.8

Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

Record
RHSA-2024:0777
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2024:0778 9.8

Red Hat Security Advisory: Jenkins and Jenkins-2-plugins security update

Record
RHSA-2024:0778
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2025:4226 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.10 on RHEL 7 security update

Record
RHSA-2025:4226
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2025:4437 7.5

Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.13 security update

Record
RHSA-2025:4437
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2022:6820 7.5

Moderate: prometheus-jmx-exporter security update

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.

Security Fix(es):

  • snakeyaml: Denial of Service due to missing nested depth limitation for collections (CVE-2022-25857)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2022:6820
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVROOT-APP-MAVEN-CVE-2022-25857 7.5

CVE-2022-25857 in org.yaml:snakeyaml - Patched by Root

Root has patched CVE-2022-25857 in the org.yaml:snakeyaml package for Root:Maven. Multiple fixed versions available.

Record
ROOT-APP-MAVEN-CVE-2022-25857
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-25857 7.5

The package org.yaml:snakeyaml from 0 and before 1.31 are vulnerable to Denial of Service (DoS) due missing to nested depth limitation for collections.

Record
UBUNTU-CVE-2022-25857
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2022:6820 No score

Moderate: prometheus-jmx-exporter security update

Prometheus JMX Exporter is a JMX to Prometheus exporter: a collector that can be configured to scrape and expose MBeans of a JMX target.

Security Fix(es):

  • snakeyaml: Denial of Service due to missing nested depth limitation for collections (CVE-2022-25857)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2022:6820
Updated
2026-11-02
OSVCLSA-2025-1752019361 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.29.tuxcare.2.

Record
CLSA-2025-1752019361
Updated
2026-11-02
OSVCLSA-2025-1752105760 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.26.tuxcare.2.

Record
CLSA-2025-1752105760
Updated
2026-11-02
OSVCLSA-2025-1752105762 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.30.tuxcare.2.

Record
CLSA-2025-1752105762
Updated
2026-11-02
OSVCLSA-2025-1755043490 No score

TuxCare security update for org.yaml:snakeyaml (8 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 8 CVEs. Fixed in 1.23.tuxcare.1.

Record
CLSA-2025-1755043490
Updated
2026-11-02
OSVCLSA-2026-1771373383 No score

TuxCare security update for org.yaml:snakeyaml (7 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 7 CVEs. Fixed in 1.28-tuxcare.1.

Record
CLSA-2026-1771373383
Updated
2026-11-02
OSVCLSA-2026-1786419162 No score

TuxCare security update for org.yaml:snakeyaml (1 CVE)

TuxCare rebuilt org.yaml:snakeyaml to address 1 CVE. Fixed in 1.27-tuxcare.1.

Record
CLSA-2026-1786419162
Updated
2026-11-02
OSVCLSA-2026-1789371790 No score

TuxCare security update for org.yaml:snakeyaml (1 CVE)

TuxCare rebuilt org.yaml:snakeyaml to address 1 CVE. Fixed in 1.7-tuxcare.1.

Record
CLSA-2026-1789371790
Updated
2026-11-02
OSVCLSA-2026-1791960280 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.8-tuxcare.1.

Record
CLSA-2026-1791960280
Updated
2026-11-02
OSVCLSA-2026-1792486861 No score

TuxCare security update for org.yaml:snakeyaml (4 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 4 CVEs. Fixed in 1.6-tuxcare.1.

Record
CLSA-2026-1792486861
Updated
2026-11-02
OSVCLSA-2026-1792845399 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.17-tuxcare.1.

Record
CLSA-2026-1792845399
Updated
2026-11-02
OSVCLSA-2026-1792845502 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.13-tuxcare.1.

Record
CLSA-2026-1792845502
Updated
2026-11-02
OSVCLSA-2026-1792845671 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.15-tuxcare.1.

Record
CLSA-2026-1792845671
Updated
2026-11-02
OSVCLSA-2026-1792847532 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.18-tuxcare.1.

Record
CLSA-2026-1792847532
Updated
2026-11-02
OSVCLSA-2026-1792847952 No score

TuxCare security update for org.yaml:snakeyaml (3 CVEs)

TuxCare rebuilt org.yaml:snakeyaml to address 3 CVEs. Fixed in 1.19-tuxcare.1.

Record
CLSA-2026-1792847952
Updated
2026-11-02
OSVopenSUSE-SU-2024:12308-1 No score

snakeyaml-1.31-1.1 on GA media

These are all security issues fixed in the snakeyaml-1.31-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12308-1
Updated
2026-11-02
OSVRLSA-2023:2097 No score

Important: Satellite 6.13 Release

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

  • CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws
  • CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack
  • CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
  • CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting
  • CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service
  • CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service
  • CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting
  • CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
  • CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
  • CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
  • CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution
  • CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record
  • CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults
  • CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs
  • CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
  • CVE-2022-42003 CVE-2022-42004 candlepin: various flaws
  • CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE
  • CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
  • CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers
  • CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

The items above are not a complete list of changes. This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document.

Record
RLSA-2023:2097
Updated
2026-11-02
OSVSUSE-SU-2022:3397-1 No score

Security update for snakeyaml

This update for snakeyaml fixes the following issues:

  • CVE-2022-38750: Fixed uncaught exception in org.yaml.snakeyaml.constructor.BaseConstructor.constructObject (bsc#1203158).
  • CVE-2022-38749: Fixed StackOverflowError for many open unmatched brackets (bsc#1203149).
  • CVE-2022-38752: Fixed uncaught exception in java.base/java.util.ArrayList.hashCode (bsc#1203154).
  • CVE-2022-38751: Fixed unrestricted data matched with Regular Expressions (bsc#1203153).
  • CVE-2022-25857: Fixed denial of service vulnerability due missing to nested depth limitation for collections (bsc#1202932).
Record
SUSE-SU-2022:3397-1
Updated
2026-11-02
OSVSUSE-SU-2022:3560-1 No score

Security update for snakeyaml

This update for snakeyaml fixes the following issues:

snakeyaml was upgraded to version 1.31:

  • CVE-2022-25857: Fixed DoS due missing to nested depth limitation for collections (bsc#1202932).
  • CVE-2022-38749: Fixed DoS due to stack overflow in parser (bsc#1202932).
  • CVE-2022-38751: Fixed DoS due to parsing of untrusted yaml files (bsc#1203153).
  • CVE-2022-38752: Fixed DoS due to stack overflow in parser (bsc#1203154).
  • CVE-2022-38750: Fixed DoS due to parsing of untrusted yaml files (bsc#1203158).
  • CVE-2020-13936: Fixed arbitrary code execution when attacker is able to modify templates (bsc#1183360).
Record
SUSE-SU-2022:3560-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
org.yaml:snakeyaml
Maven
 before 1.31
1.31
prometheus-jmx-exporter
AlmaLinux:8
 before 0.12.0-8.el8_6
0.12.0-8.el8_6
prometheus-jmx-exporter-openjdk11
AlmaLinux:8
 before 0.12.0-8.el8_6
0.12.0-8.el8_6
org.yaml:snakeyaml
TuxCare:Maven
 1.29 up to 1.29.tuxcare.2, plus listed versions
1.29.tuxcare.1
1.29.tuxcare.2
org.yaml:snakeyaml
TuxCare:Maven
 1.26 up to 1.26.tuxcare.2, plus listed versions
1.26.tuxcare.1
1.26.tuxcare.2
org.yaml:snakeyaml
TuxCare:Maven
 1.30 up to 1.30.tuxcare.2, plus listed versions
1.30.tuxcare.1
1.30.tuxcare.2
org.yaml:snakeyaml
TuxCare:Maven
 1.23 up to 1.23.tuxcare.1
1.23.tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.28 up to 1.28-tuxcare.1
1.28-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.27 up to 1.27-tuxcare.1
1.27-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.7 up to 1.7-tuxcare.1
1.7-tuxcare.1
Show 290 moreShow less
Affected packages
PackageAffectedFixed
org.yaml:snakeyaml
TuxCare:Maven
 1.8 up to 1.8-tuxcare.1
1.8-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.6 up to 1.6-tuxcare.1
1.6-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.17 up to 1.17-tuxcare.1
1.17-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.13 up to 1.13-tuxcare.1
1.13-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.15 up to 1.15-tuxcare.1
1.15-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.18 up to 1.18-tuxcare.1
1.18-tuxcare.1
org.yaml:snakeyaml
TuxCare:Maven
 1.19 up to 1.19-tuxcare.1
1.19-tuxcare.1
snakeyaml
Debian:12
 before 1.31-1
1.31-1
snakeyaml
Debian:13
 before 1.31-1
1.31-1
snakeyaml
Debian:14
 before 1.31-1
1.31-1
snakeyaml
Debian:10
 before 1.23-1+deb10u1, plus listed versions
1.23-1
1.23-1+deb10u1
org.yaml:snakeyaml
Maven
 before 1.31, plus listed versions
1.101.111.121.131.14
Show 22 moreShow less
1.151.161.171.181.191.201.211.221.231.241.251.261.271.281.291.301.41.51.61.71.81.9
1.31
snakeyaml
openEuler:22.03-LTS
 before 1.32-1.oe2203
1.32-1.oe2203
snakeyaml
openEuler:22.03-LTS-SP1
 before 1.32-1.oe2203sp1
1.32-1.oe2203sp1
snakeyaml
openEuler:20.03-LTS-SP1
 before 1.32-1.oe1
1.32-1.oe1
snakeyaml
openEuler:20.03-LTS-SP3
 before 1.32-1.oe1
1.32-1.oe1
org.yaml:snakeyaml
Red Hat Lightwell:Maven
 before 1.29.0.rhlw-00021, plus listed versions
1.101.111.121.131.14
Show 22 moreShow less
1.151.161.171.181.191.201.211.221.231.241.251.261.271.281.291.29.01.41.51.61.71.81.9
1.29.0.rhlw-00021
prometheus-jmx-exporter
Red Hat:enterprise_linux:8::appstream
 before 0:0.12.0-8.el8_6
0:0.12.0-8.el8_6
prometheus-jmx-exporter-openjdk11
Red Hat:enterprise_linux:8::appstream
 before 0:0.12.0-8.el8_6
0:0.12.0-8.el8_6
prometheus-jmx-exporter-openjdk17
Red Hat:enterprise_linux:8::appstream
 before 0:0.12.0-8.el8_6
0:0.12.0-8.el8_6
prometheus-jmx-exporter-openjdk8
Red Hat:enterprise_linux:8::appstream
 before 0:0.12.0-8.el8_6
0:0.12.0-8.el8_6
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:2.2.19-1.SP2_redhat_00001.1.el7eap
0:2.2.19-1.SP2_redhat_00001.1.el7eap
eap7-snakeyaml
Red Hat:jboss_enterprise_application_platform:7.4::el7
 before 0:1.31.0-1.redhat_00001.1.el7eap
0:1.31.0-1.redhat_00001.1.el7eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:2.2.19-1.SP2_redhat_00001.1.el8eap
0:2.2.19-1.SP2_redhat_00001.1.el8eap
eap7-snakeyaml
Red Hat:jboss_enterprise_application_platform:7.4::el8
 before 0:1.31.0-1.redhat_00001.1.el8eap
0:1.31.0-1.redhat_00001.1.el8eap
eap7-undertow
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:2.2.19-1.SP2_redhat_00001.1.el9eap
0:2.2.19-1.SP2_redhat_00001.1.el9eap
eap7-snakeyaml
Red Hat:jboss_enterprise_application_platform:7.4::el9
 before 0:1.31.0-1.redhat_00001.1.el9eap
0:1.31.0-1.redhat_00001.1.el9eap
jenkins-2-plugins
Red Hat:openshift:4.10::el8
 before 0:4.10.1675144701-1.el8
0:4.10.1675144701-1.el8
jenkins-2-plugins
Red Hat:openshift:4.9::el8
 before 0:4.9.1675668922-1.el8
0:4.9.1675668922-1.el8
jenkins
Red Hat:openshift:4.9::el8
 before 0:2.361.1.1675668150-1.el8
0:2.361.1.1675668150-1.el8
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el7
 before 0:18.0.6-1.redhat_00001.1.el7sso
0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el7
 before 0:18.0.6-1.redhat_00001.1.el7sso
0:18.0.6-1.redhat_00001.1.el7sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el8
 before 0:18.0.6-1.redhat_00001.1.el8sso
0:18.0.6-1.redhat_00001.1.el8sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el8
 before 0:18.0.6-1.redhat_00001.1.el8sso
0:18.0.6-1.redhat_00001.1.el8sso
rh-sso7-keycloak
Red Hat:red_hat_single_sign_on:7.6::el9
 before 0:18.0.6-1.redhat_00001.1.el9sso
0:18.0.6-1.redhat_00001.1.el9sso
rh-sso7-keycloak-server
Red Hat:red_hat_single_sign_on:7.6::el9
 before 0:18.0.6-1.redhat_00001.1.el9sso
0:18.0.6-1.redhat_00001.1.el9sso
ansible-collection-redhat-satellite
Red Hat:satellite_capsule:6.13::el8
 before 0:3.9.0-2.el8sat
0:3.9.0-2.el8sat
ansible-collection-redhat-satellite_operations
Red Hat:satellite_capsule:6.13::el8
 before 0:1.3.0-2.el8sat
0:1.3.0-2.el8sat
ansible-lint
Red Hat:satellite_capsule:6.13::el8
 before 0:5.0.8-4.el8pc
0:5.0.8-4.el8pc
ansible-runner
Red Hat:satellite_capsule:6.13::el8
 before 0:2.2.1-3.el8sat
0:2.2.1-3.el8sat
ansiblerole-foreman_scap_client
Red Hat:satellite_capsule:6.13::el8
 before 0:0.2.0-2.el8sat
0:0.2.0-2.el8sat
ansiblerole-insights-client
Red Hat:satellite_capsule:6.13::el8
 before 0:1.7.1-2.el8sat
0:1.7.1-2.el8sat
cjson
Red Hat:satellite_capsule:6.13::el8
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
createrepo_c
Red Hat:satellite_capsule:6.13::el8
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-libs
Red Hat:satellite_capsule:6.13::el8
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-libs-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
dynflow-utils
Red Hat:satellite_capsule:6.13::el8
 before 0:1.6.3-1.el8sat
0:1.6.3-1.el8sat
foreman
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-bootloaders-redhat
Red Hat:satellite_capsule:6.13::el8
 before 0:202102220000-1.el8sat
0:202102220000-1.el8sat
foreman-bootloaders-redhat-tftpboot
Red Hat:satellite_capsule:6.13::el8
 before 0:202102220000-1.el8sat
0:202102220000-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-discovery-image
Red Hat:satellite_capsule:6.13::el8
 before 1:4.1.0-10.el8sat
1:4.1.0-10.el8sat
foreman-discovery-image-service
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.0-4.1.el8sat
0:1.0.0-4.1.el8sat
foreman-discovery-image-service-tui
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.0-4.1.el8sat
0:1.0.0-4.1.el8sat
foreman-installer
Red Hat:satellite_capsule:6.13::el8
 before 1:3.5.2.1-1.el8sat
1:3.5.2.1-1.el8sat
foreman-installer-katello
Red Hat:satellite_capsule:6.13::el8
 before 1:3.5.2.1-1.el8sat
1:3.5.2.1-1.el8sat
foreman-proxy
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
foreman-proxy-content
Red Hat:satellite_capsule:6.13::el8
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
foreman-proxy-journald
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
katello
Red Hat:satellite_capsule:6.13::el8
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
katello-certs-tools
Red Hat:satellite_capsule:6.13::el8
 before 0:2.9.0-1.el8sat
0:2.9.0-1.el8sat
katello-client-bootstrap
Red Hat:satellite_capsule:6.13::el8
 before 0:1.7.9-1.el8sat
0:1.7.9-1.el8sat
katello-common
Red Hat:satellite_capsule:6.13::el8
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
katello-debug
Red Hat:satellite_capsule:6.13::el8
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
libcomps
Red Hat:satellite_capsule:6.13::el8
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libcomps-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libcomps-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libdb-cxx
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-cxx-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-java-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-sql-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-sql-devel-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-tcl-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-utils-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libsodium
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsodium-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsodium-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsolv
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-demo-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-tools-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libwebsockets
Red Hat:satellite_capsule:6.13::el8
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-tests-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
mosquitto
Red Hat:satellite_capsule:6.13::el8
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
mosquitto-debuginfo
Red Hat:satellite_capsule:6.13::el8
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
mosquitto-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
pulpcore-selinux
Red Hat:satellite_capsule:6.13::el8
 before 0:1.3.2-1.el8pc
0:1.3.2-1.el8pc
puppet-agent
Red Hat:satellite_capsule:6.13::el8
 before 0:7.12.1-1.el8sat
0:7.12.1-1.el8sat
puppet-agent-oauth
Red Hat:satellite_capsule:6.13::el8
 before 0:0.5.10-1.el8sat
0:0.5.10-1.el8sat
puppet-foreman_scap_client
Red Hat:satellite_capsule:6.13::el8
 before 0:0.4.0-1.el8sat
0:0.4.0-1.el8sat
puppetlabs-stdlib
Red Hat:satellite_capsule:6.13::el8
 before 0:5.2.0-1.el8sat
0:5.2.0-1.el8sat
puppetserver
Red Hat:satellite_capsule:6.13::el8
 before 0:7.9.3-1.el8sat
0:7.9.3-1.el8sat
python-aiodns
Red Hat:satellite_capsule:6.13::el8
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
python-aiofiles
Red Hat:satellite_capsule:6.13::el8
 before 0:22.1.0-1.el8pc
0:22.1.0-1.el8pc
python-aiohttp
Red Hat:satellite_capsule:6.13::el8
 before 0:3.8.1-3.el8pc
0:3.8.1-3.el8pc
python-aiohttp-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:3.8.1-3.el8pc
0:3.8.1-3.el8pc
python-aiohttp-xmlrpc
Red Hat:satellite_capsule:6.13::el8
 before 0:1.5.0-2.el8pc
0:1.5.0-2.el8pc
python-aioredis
Red Hat:satellite_capsule:6.13::el8
 before 0:2.0.1-2.el8pc
0:2.0.1-2.el8pc
python-aiosignal
Red Hat:satellite_capsule:6.13::el8
 before 0:1.2.0-2.el8pc
0:1.2.0-2.el8pc
python-ansible-builder
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.1-4.el8pc
0:1.0.1-4.el8pc
python-asgiref
Red Hat:satellite_capsule:6.13::el8
 before 0:3.5.2-1.el8pc
0:3.5.2-1.el8pc
python-async-lru
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.3-1.el8pc
0:1.0.3-1.el8pc
python-async-timeout
Red Hat:satellite_capsule:6.13::el8
 before 0:4.0.2-2.el8pc
0:4.0.2-2.el8pc
python-asyncio-throttle
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.2-3.el8pc
0:1.0.2-3.el8pc
python-attrs
Red Hat:satellite_capsule:6.13::el8
 before 0:21.4.0-2.el8pc
0:21.4.0-2.el8pc
python-backoff
Red Hat:satellite_capsule:6.13::el8
 before 0:2.1.2-1.el8pc
0:2.1.2-1.el8pc
python-bindep
Red Hat:satellite_capsule:6.13::el8
 before 0:2.11.0-2.el8pc
0:2.11.0-2.el8pc
python-bleach
Red Hat:satellite_capsule:6.13::el8
 before 0:3.3.1-2.el8pc
0:3.3.1-2.el8pc
python-bleach-allowlist
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.3-3.el8pc
0:1.0.3-3.el8pc
python-bracex
Red Hat:satellite_capsule:6.13::el8
 before 0:2.2.1-2.el8pc
0:2.2.1-2.el8pc
python-brotli
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.9-2.el8pc
0:1.0.9-2.el8pc
python-brotli-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.9-2.el8pc
0:1.0.9-2.el8pc
python-cchardet
Red Hat:satellite_capsule:6.13::el8
 before 0:2.1.7-4.el8pc
0:2.1.7-4.el8pc
python-cchardet-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:2.1.7-4.el8pc
0:2.1.7-4.el8pc
python-certifi
Red Hat:satellite_capsule:6.13::el8
 before 0:2020.6.20-3.el8pc
0:2020.6.20-3.el8pc
python-cffi
Red Hat:satellite_capsule:6.13::el8
 before 0:1.15.1-1.el8pc
0:1.15.1-1.el8pc
python-cffi-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.15.1-1.el8pc
0:1.15.1-1.el8pc
python-chardet
Red Hat:satellite_capsule:6.13::el8
 before 0:5.0.0-1.el8pc
0:5.0.0-1.el8pc
python-charset-normalizer
Red Hat:satellite_capsule:6.13::el8
 before 0:2.1.1-1.el8pc
0:2.1.1-1.el8pc
python-click
Red Hat:satellite_capsule:6.13::el8
 before 0:8.1.3-1.el8pc
0:8.1.3-1.el8pc
python-click-shell
Red Hat:satellite_capsule:6.13::el8
 before 0:2.1-3.el8pc
0:2.1-3.el8pc
python-colorama
Red Hat:satellite_capsule:6.13::el8
 before 0:0.4.4-3.el8pc
0:0.4.4-3.el8pc
python-commonmark
Red Hat:satellite_capsule:6.13::el8
 before 0:0.9.1-5.el8pc
0:0.9.1-5.el8pc
python-contextlib2
Red Hat:satellite_capsule:6.13::el8
 before 0:21.6.0-3.el8pc
0:21.6.0-3.el8pc
python-cryptography
Red Hat:satellite_capsule:6.13::el8
 before 0:3.4.8-1.el8pc
0:3.4.8-1.el8pc
python-cryptography-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:3.4.8-1.el8pc
0:3.4.8-1.el8pc
python-daemon
Red Hat:satellite_capsule:6.13::el8
 before 0:2.3.1-1.1.el8sat
0:2.3.1-1.1.el8sat
python-dataclasses
Red Hat:satellite_capsule:6.13::el8
 before 0:0.8-3.el8pc
0:0.8-3.el8pc
python-dateutil
Red Hat:satellite_capsule:6.13::el8
 before 0:2.8.2-2.el8pc
0:2.8.2-2.el8pc
python-debian
Red Hat:satellite_capsule:6.13::el8
 before 0:0.1.43-2.el8pc
0:0.1.43-2.el8pc
python-defusedxml
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.1-3.el8pc
0:0.7.1-3.el8pc
python-deprecated
Red Hat:satellite_capsule:6.13::el8
 before 0:1.2.13-1.el8pc
0:1.2.13-1.el8pc
python-diff-match-patch
Red Hat:satellite_capsule:6.13::el8
 before 0:20200713-3.el8pc
0:20200713-3.el8pc
python-distro
Red Hat:satellite_capsule:6.13::el8
 before 0:1.7.0-1.el8pc
0:1.7.0-1.el8pc
python-django
Red Hat:satellite_capsule:6.13::el8
 before 0:3.2.18-1.el8pc
0:3.2.18-1.el8pc
python-django-currentuser
Red Hat:satellite_capsule:6.13::el8
 before 0:0.5.3-5.el8pc
0:0.5.3-5.el8pc
python-django-filter
Red Hat:satellite_capsule:6.13::el8
 before 0:22.1-2.el8pc
0:22.1-2.el8pc
python-django-guid
Red Hat:satellite_capsule:6.13::el8
 before 0:3.3.0-1.el8pc
0:3.3.0-1.el8pc
python-django-import-export
Red Hat:satellite_capsule:6.13::el8
 before 0:2.8.0-1.el8pc
0:2.8.0-1.el8pc
python-django-lifecycle
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.0-1.el8pc
0:1.0.0-1.el8pc
python-django-readonly-field
Red Hat:satellite_capsule:6.13::el8
 before 0:1.1.1-3.el8pc
0:1.1.1-3.el8pc
python-djangorestframework
Red Hat:satellite_capsule:6.13::el8
 before 0:3.13.1-2.el8pc
0:3.13.1-2.el8pc
python-djangorestframework-queryfields
Red Hat:satellite_capsule:6.13::el8
 before 0:1.0.0-5.el8pc
0:1.0.0-5.el8pc
python-docutils
Red Hat:satellite_capsule:6.13::el8
 before 0:0.19-1.1.el8sat
0:0.19-1.1.el8sat
python-drf-access-policy
Red Hat:satellite_capsule:6.13::el8
 before 0:1.1.2-1.el8pc
0:1.1.2-1.el8pc
python-drf-nested-routers
Red Hat:satellite_capsule:6.13::el8
 before 0:0.93.4-3.el8pc
0:0.93.4-3.el8pc
python-drf-spectacular
Red Hat:satellite_capsule:6.13::el8
 before 0:0.23.1-1.el8pc
0:0.23.1-1.el8pc
python-dynaconf
Red Hat:satellite_capsule:6.13::el8
 before 0:3.1.9-1.el8pc
0:3.1.9-1.el8pc
python-ecdsa
Red Hat:satellite_capsule:6.13::el8
 before 0:0.14.1-2.el8pc
0:0.14.1-2.el8pc
python-enrich
Red Hat:satellite_capsule:6.13::el8
 before 0:1.2.6-5.el8pc
0:1.2.6-5.el8pc
python-et-xmlfile
Red Hat:satellite_capsule:6.13::el8
 before 0:1.1.0-2.el8pc
0:1.1.0-2.el8pc
python-flake8
Red Hat:satellite_capsule:6.13::el8
 before 0:3.9.2-5.el8pc
0:3.9.2-5.el8pc
python-frozenlist
Red Hat:satellite_capsule:6.13::el8
 before 0:1.3.0-2.el8pc
0:1.3.0-2.el8pc
python-frozenlist-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.3.0-2.el8pc
0:1.3.0-2.el8pc
python-future
Red Hat:satellite_capsule:6.13::el8
 before 0:0.18.2-5.el8pc
0:0.18.2-5.el8pc
python-galaxy-importer
Red Hat:satellite_capsule:6.13::el8
 before 0:0.4.5-1.el8pc
0:0.4.5-1.el8pc
python-gitdb
Red Hat:satellite_capsule:6.13::el8
 before 0:4.0.9-2.el8pc
0:4.0.9-2.el8pc
python-gitpython
Red Hat:satellite_capsule:6.13::el8
 before 0:3.1.26-3.el8pc
0:3.1.26-3.el8pc
python-gnupg
Red Hat:satellite_capsule:6.13::el8
 before 0:0.5.0-1.el8pc
0:0.5.0-1.el8pc
python-gunicorn
Red Hat:satellite_capsule:6.13::el8
 before 0:20.1.0-5.el8pc
0:20.1.0-5.el8pc
python-idna
Red Hat:satellite_capsule:6.13::el8
 before 0:3.3-2.el8pc
0:3.3-2.el8pc
python-idna-ssl
Red Hat:satellite_capsule:6.13::el8
 before 0:1.1.0-5.el8pc
0:1.1.0-5.el8pc
python-importlib-metadata
Red Hat:satellite_capsule:6.13::el8
 before 0:4.10.1-2.el8pc
0:4.10.1-2.el8pc
python-inflection
Red Hat:satellite_capsule:6.13::el8
 before 0:0.5.1-3.el8pc
0:0.5.1-3.el8pc
python-iniparse
Red Hat:satellite_capsule:6.13::el8
 before 0:0.4-35.el8pc
0:0.4-35.el8pc
python-jinja2
Red Hat:satellite_capsule:6.13::el8
 before 0:3.1.2-1.el8pc
0:3.1.2-1.el8pc
python-jsonschema
Red Hat:satellite_capsule:6.13::el8
 before 0:4.9.1-1.el8pc
0:4.9.1-1.el8pc
python-lockfile
Red Hat:satellite_capsule:6.13::el8
 before 0:0.12.2-1.el8sat
0:0.12.2-1.el8sat
python-lxml
Red Hat:satellite_capsule:6.13::el8
 before 0:4.7.1-2.el8pc
0:4.7.1-2.el8pc
python-lxml-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:4.7.1-2.el8pc
0:4.7.1-2.el8pc
python-markdown
Red Hat:satellite_capsule:6.13::el8
 before 0:3.3.6-3.el8pc
0:3.3.6-3.el8pc
python-markuppy
Red Hat:satellite_capsule:6.13::el8
 before 0:1.14-3.el8pc
0:1.14-3.el8pc
python-markupsafe
Red Hat:satellite_capsule:6.13::el8
 before 0:2.0.1-3.el8pc
0:2.0.1-3.el8pc
python-markupsafe-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:2.0.1-3.el8pc
0:2.0.1-3.el8pc
python-mccabe
Red Hat:satellite_capsule:6.13::el8
 before 0:0.6.1-3.el8pc
0:0.6.1-3.el8pc
python-multidict
Red Hat:satellite_capsule:6.13::el8
 before 0:6.0.2-2.el8pc
0:6.0.2-2.el8pc
python-multidict-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:6.0.2-2.el8pc
0:6.0.2-2.el8pc
python-naya
Red Hat:satellite_capsule:6.13::el8
 before 0:1.1.1-3.el8pc
0:1.1.1-3.el8pc
python-odfpy
Red Hat:satellite_capsule:6.13::el8
 before 0:1.4.1-6.el8pc
0:1.4.1-6.el8pc
python-openpyxl
Red Hat:satellite_capsule:6.13::el8
 before 0:3.0.9-2.el8pc
0:3.0.9-2.el8pc
python-packaging
Red Hat:satellite_capsule:6.13::el8
 before 0:21.3-1.1.el8sat
0:21.3-1.1.el8sat
python-parsley
Red Hat:satellite_capsule:6.13::el8
 before 0:1.3-2.el8pc
0:1.3-2.el8pc
python-pbr
Red Hat:satellite_capsule:6.13::el8
 before 0:5.8.0-4.el8pc
0:5.8.0-4.el8pc
python-pexpect
Red Hat:satellite_capsule:6.13::el8
 before 0:4.8.0-2.el8sat
0:4.8.0-2.el8sat
python-productmd
Red Hat:satellite_capsule:6.13::el8
 before 0:1.33-3.el8pc
0:1.33-3.el8pc
python-protobuf
Red Hat:satellite_capsule:6.13::el8
 before 0:4.21.6-1.el8pc
0:4.21.6-1.el8pc
python-psycopg2
Red Hat:satellite_capsule:6.13::el8
 before 0:2.9.3-2.el8pc
0:2.9.3-2.el8pc
python-psycopg2-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:2.9.3-2.el8pc
0:2.9.3-2.el8pc
python-ptyprocess
Red Hat:satellite_capsule:6.13::el8
 before 0:0.7.0-1.el8sat
0:0.7.0-1.el8sat
python-pulp-ansible
Red Hat:satellite_capsule:6.13::el8
 before 1:0.15.0-1.el8pc
1:0.15.0-1.el8pc
python-pulp-certguard
Red Hat:satellite_capsule:6.13::el8
 before 0:1.5.5-1.el8pc
0:1.5.5-1.el8pc
python-pulp-cli
Red Hat:satellite_capsule:6.13::el8
 before 0:0.14.0-4.el8pc
0:0.14.0-4.el8pc
python-pulp-container
Red Hat:satellite_capsule:6.13::el8
 before 0:2.14.3-1.el8pc
0:2.14.3-1.el8pc
python-pulp-deb
Red Hat:satellite_capsule:6.13::el8
 before 0:2.20.0-1.el8pc
0:2.20.0-1.el8pc
python-pulp-file
Red Hat:satellite_capsule:6.13::el8
 before 0:1.11.1-1.el8pc
0:1.11.1-1.el8pc
python-pulp-rpm
Red Hat:satellite_capsule:6.13::el8
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
python-pulpcore
Red Hat:satellite_capsule:6.13::el8
 before 0:3.21.6-1.el8pc
0:3.21.6-1.el8pc
python-pyOpenSSL
Red Hat:satellite_capsule:6.13::el8
 before 0:19.1.0-3.el8pc
0:19.1.0-3.el8pc
python-pycairo
Red Hat:satellite_capsule:6.13::el8
 before 0:1.20.1-3.el8pc
0:1.20.1-3.el8pc
python-pycairo-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.20.1-3.el8pc
0:1.20.1-3.el8pc
python-pycares
Red Hat:satellite_capsule:6.13::el8
 before 0:4.1.2-2.el8pc
0:4.1.2-2.el8pc
python-pycares-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:4.1.2-2.el8pc
0:4.1.2-2.el8pc
python-pycodestyle
Red Hat:satellite_capsule:6.13::el8
 before 0:2.7.0-5.el8pc
0:2.7.0-5.el8pc
python-pycparser
Red Hat:satellite_capsule:6.13::el8
 before 0:2.21-2.el8pc
0:2.21-2.el8pc
python-pycryptodomex
Red Hat:satellite_capsule:6.13::el8
 before 0:3.14.1-2.el8pc
0:3.14.1-2.el8pc
python-pycryptodomex-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:3.14.1-2.el8pc
0:3.14.1-2.el8pc
python-pyflakes
Red Hat:satellite_capsule:6.13::el8
 before 0:2.3.1-5.el8pc
0:2.3.1-5.el8pc
python-pygments
Red Hat:satellite_capsule:6.13::el8
 before 0:2.11.2-2.el8pc
0:2.11.2-2.el8pc
python-pygobject
Red Hat:satellite_capsule:6.13::el8
 before 1:3.40.1-4.el8pc
1:3.40.1-4.el8pc
python-pygobject-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 1:3.40.1-4.el8pc
1:3.40.1-4.el8pc
python-pygtrie
Red Hat:satellite_capsule:6.13::el8
 before 0:2.5.0-1.el8pc
0:2.5.0-1.el8pc
python-pyjwkest
Red Hat:satellite_capsule:6.13::el8
 before 0:1.4.2-6.el8pc
0:1.4.2-6.el8pc
python-pyjwt
Red Hat:satellite_capsule:6.13::el8
 before 0:2.5.0-2.el8pc
0:2.5.0-2.el8pc
python-pyparsing
Red Hat:satellite_capsule:6.13::el8
 before 0:2.4.7-3.el8pc
0:2.4.7-3.el8pc
python-pyrsistent
Red Hat:satellite_capsule:6.13::el8
 before 0:0.18.1-2.el8pc
0:0.18.1-2.el8pc
python-pyrsistent-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:0.18.1-2.el8pc
0:0.18.1-2.el8pc
python-pytz
Red Hat:satellite_capsule:6.13::el8
 before 0:2022.2.1-1.el8pc
0:2022.2.1-1.el8pc
python-pyyaml
Red Hat:satellite_capsule:6.13::el8
 before 0:5.4.1-4.el8pc
0:5.4.1-4.el8pc
python-qpid
Red Hat:satellite_capsule:6.13::el8
 before 0:1.37.0-1.el8
0:1.37.0-1.el8
python-redis
Red Hat:satellite_capsule:6.13::el8
 before 0:4.3.4-1.el8pc
0:4.3.4-1.el8pc
python-requests
Red Hat:satellite_capsule:6.13::el8
 before 0:2.28.1-1.el8pc
0:2.28.1-1.el8pc
python-requirements-parser
Red Hat:satellite_capsule:6.13::el8
 before 0:0.2.0-3.el8pc
0:0.2.0-3.el8pc
python-rhsm
Red Hat:satellite_capsule:6.13::el8
 before 0:1.19.2-3.el8pc
0:1.19.2-3.el8pc
python-rhsm-debugsource
Red Hat:satellite_capsule:6.13::el8
 before 0:1.19.2-3.el8pc
0:1.19.2-3.el8pc
python-rich
Red Hat:satellite_capsule:6.13::el8
 before 0:10.12.0-3.el8pc
0:10.12.0-3.el8pc
python-ruamel-yaml
Red Hat:satellite_capsule:6.13::el8
 before 0:0.17.20-2.el8pc
0:0.17.20-2.el8pc
python-ruamel-yaml-clib
Red Hat:satellite_capsule:6.13::el8
 before 0:0.2.6-2.el8pc
0:0.2.6-2.el8pc
rubygem-clamp
Red Hat:satellite_maintenance:6.13::el8
 before 0:1.1.2-7.el8sat
0:1.1.2-7.el8sat
rubygem-foreman_maintain
Red Hat:satellite_maintenance:6.13::el8
 before 1:1.2.8-1.el8sat
1:1.2.8-1.el8sat
rubygem-highline
Red Hat:satellite_maintenance:6.13::el8
 before 0:2.0.3-2.el8sat
0:2.0.3-2.el8sat
satellite-clone
Red Hat:satellite_maintenance:6.13::el8
 before 0:3.3.0-1.el8sat
0:3.3.0-1.el8sat
satellite-maintain
Red Hat:satellite_maintenance:6.13::el8
 before 0:0.0.1-1.el8sat
0:0.0.1-1.el8sat
foreman
Red Hat:satellite_utils:6.13::el8
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.13::el8
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
python-pulp_manifest
Red Hat:satellite_utils:6.13::el8
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
python39-pulp_manifest
Red Hat:satellite_utils:6.13::el8
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
rubygem-amazing_print
Red Hat:satellite_utils:6.13::el8
 before 0:1.4.0-1.el8sat
0:1.4.0-1.el8sat
rubygem-apipie-bindings
Red Hat:satellite_utils:6.13::el8
 before 0:0.6.0-1.el8sat
0:0.6.0-1.el8sat
rubygem-clamp
Red Hat:satellite_utils:6.13::el8
 before 0:1.1.2-7.el8sat
0:1.1.2-7.el8sat
rubygem-domain_name
Red Hat:satellite_utils:6.13::el8
 before 0:0.5.20190701-1.el8sat
0:0.5.20190701-1.el8sat
rubygem-fast_gettext
Red Hat:satellite_utils:6.13::el8
 before 0:1.8.0-1.el8sat
0:1.8.0-1.el8sat
rubygem-ffi
Red Hat:satellite_utils:6.13::el8
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-ffi-debuginfo
Red Hat:satellite_utils:6.13::el8
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-ffi-debugsource
Red Hat:satellite_utils:6.13::el8
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-gssapi
Red Hat:satellite_utils:6.13::el8
 before 0:1.3.1-1.el8sat
0:1.3.1-1.el8sat
rubygem-hammer_cli
Red Hat:satellite_utils:6.13::el8
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
rubygem-hammer_cli_foreman
Red Hat:satellite_utils:6.13::el8
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
rubygem-hammer_cli_foreman_admin
Red Hat:satellite_utils:6.13::el8
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-hammer_cli_foreman_ansible
Red Hat:satellite_utils:6.13::el8
 before 0:0.4.0-2.el8sat
0:0.4.0-2.el8sat
rubygem-hammer_cli_foreman_azure_rm
Red Hat:satellite_utils:6.13::el8
 before 0:0.2.2-1.el8sat
0:0.2.2-1.el8sat
rubygem-hammer_cli_foreman_bootdisk
Red Hat:satellite_utils:6.13::el8
 before 0:0.3.0-3.el8sat
0:0.3.0-3.el8sat
rubygem-hammer_cli_foreman_discovery
Red Hat:satellite_utils:6.13::el8
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-hammer_cli_foreman_google
Red Hat:satellite_utils:6.13::el8
 before 0:1.0.0-1.el8sat
0:1.0.0-1.el8sat
rubygem-hammer_cli_foreman_openscap
Red Hat:satellite_utils:6.13::el8
 before 0:0.1.13-2.el8sat
0:0.1.13-2.el8sat
rubygem-hammer_cli_foreman_remote_execution
Red Hat:satellite_utils:6.13::el8
 before 0:0.2.2-1.el8sat
0:0.2.2-1.el8sat
rubygem-hammer_cli_foreman_tasks
Red Hat:satellite_utils:6.13::el8
 before 0:0.0.18-1.el8sat
0:0.0.18-1.el8sat
rubygem-hammer_cli_foreman_templates
Red Hat:satellite_utils:6.13::el8
 before 0:0.2.0-3.el8sat
0:0.2.0-3.el8sat
rubygem-hammer_cli_foreman_virt_who_configure
Red Hat:satellite_utils:6.13::el8
 before 0:0.0.9-2.el8sat
0:0.0.9-2.el8sat
rubygem-hammer_cli_foreman_webhooks
Red Hat:satellite_utils:6.13::el8
 before 0:0.0.4-1.el8sat
0:0.0.4-1.el8sat
rubygem-hammer_cli_katello
Red Hat:satellite_utils:6.13::el8
 before 0:1.7.3-1.el8sat
0:1.7.3-1.el8sat
rubygem-hashie
Red Hat:satellite_utils:6.13::el8
 before 0:5.0.0-1.el8sat
0:5.0.0-1.el8sat
rubygem-highline
Red Hat:satellite_utils:6.13::el8
 before 0:2.0.3-2.el8sat
0:2.0.3-2.el8sat
rubygem-http-accept
Red Hat:satellite_utils:6.13::el8
 before 0:1.7.0-1.el8sat
0:1.7.0-1.el8sat
rubygem-http-cookie
Red Hat:satellite_utils:6.13::el8
 before 0:1.0.5-1.el8sat
0:1.0.5-1.el8sat
rubygem-jwt
Red Hat:satellite_utils:6.13::el8
 before 0:2.5.0-1.el8sat
0:2.5.0-1.el8sat
prometheus-jmx-exporter
Rocky Linux:8
 before 0:0.12.0-8.el8
0:0.12.0-8.el8
prometheus-jmx-exporter
Rocky Linux:8
 before 0:0.12.0-8.el8_6
0:0.12.0-8.el8_6
org.yaml:snakeyaml
Root:Maven
 before 1.23-aikido.2
1.23-aikido.21.30-aikido.11.29-aikido.11.23-aikido.11.27-aikido.1
io.root.org.yaml:snakeyaml
Root:Maven
 before 1.23-root.io.2
1.23-root.io.21.30-root.io.11.29-root.io.11.23-root.io.11.27-root.io.1
snakeyaml
SUSE:Linux Enterprise Module for Development Tools 15 SP3
 before 1.31-150200.3.8.1
1.31-150200.3.8.1
snakeyaml
SUSE:Linux Enterprise Module for Development Tools 15 SP4
 before 1.31-150200.3.8.1
1.31-150200.3.8.1
snakeyaml
SUSE:Manager Server Module 4.2
 before 1.31-150200.3.8.1
1.31-150200.3.8.1
snakeyaml
SUSE:Manager Server Module 4.3
 before 1.31-150200.3.8.1
1.31-150200.3.8.1
snakeyaml
openSUSE:Leap 15.3
 before 1.31-150200.3.8.1
1.31-150200.3.8.1
snakeyaml
openSUSE:Leap 15.4
 before 1.31-150200.3.8.1
1.31-150200.3.8.1
snakeyaml
SUSE:Manager Server Module 4.1
 before 1.31-150200.12.6.1
1.31-150200.12.6.1
snakeyaml
Ubuntu:Pro:14.04:LTS
 before 1.12-2ubuntu0.14.04.1~esm1, plus listed versions
1.12-2
1.12-2ubuntu0.14.04.1~esm1
snakeyaml
Ubuntu:Pro:16.04:LTS
 before 1.12-2ubuntu0.16.04.1~esm1, plus listed versions
1.12-2
1.12-2ubuntu0.16.04.1~esm1
snakeyaml
Ubuntu:18.04:LTS
 before 1.23-1+deb10u1build0.18.04.1, plus listed versions
1.17-11.19-11.20-11.23-1~18.04
1.23-1+deb10u1build0.18.04.1
snakeyaml
Ubuntu:20.04:LTS
 before 1.25+ds-2ubuntu0.1, plus listed versions
1.23-11.25+ds-2
1.25+ds-2ubuntu0.1
snakeyaml
Ubuntu:22.04:LTS
 before 1.29-1ubuntu0.22.04.1, plus listed versions
1.28-11.29-1
1.29-1ubuntu0.22.04.1

History

History
RecordedChangedSources
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-25857 is a high vulnerability (CVSS 7.5) in Snakeyaml Project Snakeyaml, published August 30, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.93%, the 87th percentile. Fixed in org.yaml:snakeyaml 1.31.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 310 package rows and 751 references. The JSON record has them. Also not on the record: 957 package claims. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 1 source record.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open