CVE-2018-20677

bootstrap Cross-site Scripting vulnerability

6.1 MediumFix available

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

3.98%Down 7.8 points since Apr 14, 2021

What each source reports

NVD Score used 6.1

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: CVE-2018-20677
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: CVE-2018-20677
Updated: 2026-11-02

EUVDEUVD-2019-0192 No score

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: EUVD-2019-0192
Updated: 2026-11-03

GitHub AdvisoriesGHSA-ph58-4vrj-w6hr 6.1

bootstrap Cross-site Scripting vulnerability

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: GHSA-ph58-4vrj-w6hr
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Updated: 2026-11-02

OSVAZL-105146 6.1

CVE-2018-20677 affecting package ceph 18.2.2-13

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: AZL-105146
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVAZL-105161 6.1

CVE-2018-20677 affecting package fluent-bit 3.1.10-7

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: AZL-105161
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

Show 21 moreShow less

OSVAZL-105263 6.1

CVE-2018-20677 affecting package pytorch 2.2.2-17

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: AZL-105263
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVAZL-44799 6.1

CVE-2018-20677 affecting package python-openstackdocstheme 3.0.0-9

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: AZL-44799
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-05

OSV 6.1

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: CVE-2018-20677
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2018-20677 6.1

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: DEBIAN-CVE-2018-20677
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVGHSA-ph58-4vrj-w6hr 6.1

bootstrap Cross-site Scripting vulnerability

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: GHSA-ph58-4vrj-w6hr
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Updated: 2026-11-02

OSVRHBA-2019:1076 6.1

Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3

Record: RHBA-2019:1076
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHBA-2019:1570 6.1

Red Hat Bug Fix Advisory: ovirt-engine-api-explorer bug fix and enhancement update for RHV 4.3.4

Record: RHBA-2019:1570
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2019:3023 6.1

Red Hat Security Advisory: ovirt-engine-ui-extensions security and bug fix update

Record: RHSA-2019:3023
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2020:3936 6.1

Red Hat Security Advisory: ipa security, bug fix, and enhancement update

Record: RHSA-2020:3936
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2020:4670 6.1

Red Hat Security Advisory: idm:DL1 and idm:client security, bug fix, and enhancement update

Record: RHSA-2020:4670
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2020:5571 6.1

Red Hat Security Advisory: python-XStatic-Bootstrap-SCSS security update

Record: RHSA-2020:5571
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRHSA-2023:5693 6.3

Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security, enhancement, and bug fix update

Record: RHSA-2023:5693
CVSS 3.1: 6.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Updated: 2026-11-02

OSVRLSA-2020:4670 6.1

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

Rocky Enterprise Software Foundation Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)
bootstrap: XSS in the data-target attribute (CVE-2016-10735)
bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)
bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)
bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)
bootstrap: XSS in the affix configuration target property (CVE-2018-20677)
bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)
js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)
jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)
ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record: RLSA-2020:4670
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVUBUNTU-CVE-2018-20677 6.1

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Record: UBUNTU-CVE-2018-20677
CVSS 3.0: 6.1 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVALSA-2020:4670 No score

Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update

AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

The following packages have been upgraded to a later upstream version: ipa (4.8.7), softhsm (2.6.0), opendnssec (2.1.6). (BZ#1759888, BZ#1818765, BZ#1818877)

Security Fix(es):

js-jquery: Cross-site scripting via cross-domain ajax requests (CVE-2015-9251)
bootstrap: XSS in the data-target attribute (CVE-2016-10735)
bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute (CVE-2018-14040)
bootstrap: Cross-site Scripting (XSS) in the data-container property of tooltip (CVE-2018-14042)
bootstrap: XSS in the tooltip data-viewport attribute (CVE-2018-20676)
bootstrap: XSS in the affix configuration target property (CVE-2018-20677)
bootstrap: XSS in the tooltip or popover data-template attribute (CVE-2019-8331)
js-jquery: Prototype pollution in object's prototype leading to denial of service, remote code execution, or property injection (CVE-2019-11358)
jquery: Cross-site scripting due to improper injQuery.htmlPrefilter method (CVE-2020-11022)
ipa: No password length restriction leads to denial of service (CVE-2020-1722)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record: ALSA-2020:4670
Updated: 2026-11-02

OSVCLSA-2026-1773360979 No score

TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.2.0-tuxcare.1.

Record: CLSA-2026-1773360979
Updated: 2026-11-02

OSVCLSA-2026-1780447821 No score

TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.6-tuxcare.1.

Record: CLSA-2026-1780447821
Updated: 2026-11-02

OSVCLSA-2026-1782349132 No score

TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.7-tuxcare.1.

Record: CLSA-2026-1782349132
Updated: 2026-11-02

OSVCLSA-2026-1787224839 No score

TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.2-tuxcare.1.

Record: CLSA-2026-1787224839
Updated: 2026-11-02

OSVCLSA-2026-1787224853 No score

TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.1-tuxcare.1.

Record: CLSA-2026-1787224853
Updated: 2026-11-02

OSVCLSA-2026-1787226168 No score

TuxCare security update for bootstrap (7 CVEs)

TuxCare rebuilt bootstrap to address 7 CVEs. Fixed in 3.3.5-tuxcare.1.

Record: CLSA-2026-1787226168
Updated: 2026-11-02

Affected products

getbootstrap bootstrap

Affected packages

Affected packages
Package	Affected	Fixed
`bootstrap` npm	before 3.4.0	3.4.0
`bootstrap-sass` npm	before 3.4.0	3.4.0
`twbs/bootstrap` Packagist	before 3.4.0	3.4.0
`org.webjars:bootstrap` Maven	before 3.4.0	3.4.0
`bootstrap` RubyGems	before 3.4.0	3.4.0
`bootstrap-sass` RubyGems	before 3.4.0	3.4.0
`bootstrap` NuGet	before 3.4.0	3.4.0
`custodia` AlmaLinux:8 From an advisory covering 10 CVEs	before 0.6.0-3.module_el8.6.0+2881+2f24dc92	0.6.0-3.module_el8.6.0+2881+2f24dc92
`python3-custodia` AlmaLinux:8 From an advisory covering 10 CVEs	before 0.6.0-3.module_el8.6.0+2881+2f24dc92	0.6.0-3.module_el8.6.0+2881+2f24dc92
`python3-jwcrypto` AlmaLinux:8 From an advisory covering 10 CVEs	before 0.5.0-1.module_el8.5.0+2641+983b221b	0.5.0-1.module_el8.5.0+2641+983b221b

Show 212 moreShow less

Affected packages
Package	Affected	Fixed
`python3-jwcrypto` AlmaLinux:8 From an advisory covering 10 CVEs	before 0.5.0-1.module_el8.6.0+2881+2f24dc92	0.5.0-1.module_el8.6.0+2881+2f24dc92
`python3-jwcrypto` AlmaLinux:8 From an advisory covering 10 CVEs	before 0.5.0-1.module_el8.6.0+2737+7e73ea90	0.5.0-1.module_el8.6.0+2737+7e73ea90
`python3-kdcproxy` AlmaLinux:8 From an advisory covering 10 CVEs	before 0.4-5.module_el8.6.0+2881+2f24dc92	0.4-5.module_el8.6.0+2881+2f24dc92
`python3-pyusb` AlmaLinux:8 From an advisory covering 10 CVEs	before 1.0.0-9.module_el8.5.0+2641+983b221b	1.0.0-9.module_el8.5.0+2641+983b221b
`python3-pyusb` AlmaLinux:8 From an advisory covering 10 CVEs	before 1.0.0-9.module_el8.6.0+2881+2f24dc92	1.0.0-9.module_el8.6.0+2881+2f24dc92
`python3-pyusb` AlmaLinux:8 From an advisory covering 10 CVEs	before 1.0.0-9.module_el8.6.0+2737+7e73ea90	1.0.0-9.module_el8.6.0+2737+7e73ea90
`python3-qrcode` AlmaLinux:8 From an advisory covering 10 CVEs	before 5.1-12.module_el8.6.0+2881+2f24dc92	5.1-12.module_el8.6.0+2881+2f24dc92
`python3-qrcode` AlmaLinux:8 From an advisory covering 10 CVEs	before 5.1-12.module_el8.5.0+2641+983b221b	5.1-12.module_el8.5.0+2641+983b221b
`python3-qrcode` AlmaLinux:8 From an advisory covering 10 CVEs	before 5.1-12.module_el8.6.0+2737+7e73ea90	5.1-12.module_el8.6.0+2737+7e73ea90
`python3-qrcode-core` AlmaLinux:8 From an advisory covering 10 CVEs	before 5.1-12.module_el8.6.0+2737+7e73ea90	5.1-12.module_el8.6.0+2737+7e73ea90
`python3-qrcode-core` AlmaLinux:8 From an advisory covering 10 CVEs	before 5.1-12.module_el8.6.0+2881+2f24dc92	5.1-12.module_el8.6.0+2881+2f24dc92
`python3-qrcode-core` AlmaLinux:8 From an advisory covering 10 CVEs	before 5.1-12.module_el8.5.0+2641+983b221b	5.1-12.module_el8.5.0+2641+983b221b
`python3-yubico` AlmaLinux:8 From an advisory covering 10 CVEs	before 1.3.2-9.module_el8.5.0+2641+983b221b	1.3.2-9.module_el8.5.0+2641+983b221b
`python3-yubico` AlmaLinux:8 From an advisory covering 10 CVEs	before 1.3.2-9.module_el8.6.0+2737+7e73ea90	1.3.2-9.module_el8.6.0+2737+7e73ea90
`python3-yubico` AlmaLinux:8 From an advisory covering 10 CVEs	before 1.3.2-9.module_el8.6.0+2881+2f24dc92	1.3.2-9.module_el8.6.0+2881+2f24dc92
`ceph` Azure Linux:3	through 18.2.2-13	None known
`fluent-bit` Azure Linux:3	through 3.1.10-7	None known
`pytorch` Azure Linux:3	through 2.2.2-17	None known
`python-openstackdocstheme` Azure Linux:3	through 3.0.0-9	None known
`bootstrap` TuxCare:npm From an advisory covering 7 CVEs	3.2.0-tuxcare.0 up to 3.2.0-tuxcare.1, plus listed versions 3.2.0	3.2.0-tuxcare.1
`bootstrap` TuxCare:npm From an advisory covering 7 CVEs	3.3.6-tuxcare.0 up to 3.3.6-tuxcare.1, plus listed versions 3.3.6	3.3.6-tuxcare.1
`bootstrap` TuxCare:npm From an advisory covering 7 CVEs	3.3.7-tuxcare.0 up to 3.3.7-tuxcare.1, plus listed versions 3.3.7	3.3.7-tuxcare.1
`bootstrap` TuxCare:npm From an advisory covering 7 CVEs	3.3.2-tuxcare.0 up to 3.3.2-tuxcare.1, plus listed versions 3.3.2	3.3.2-tuxcare.1
`bootstrap` TuxCare:npm From an advisory covering 7 CVEs	3.3.1-tuxcare.0 up to 3.3.1-tuxcare.1, plus listed versions 3.3.1	3.3.1-tuxcare.1
`bootstrap` TuxCare:npm From an advisory covering 7 CVEs	3.3.5-tuxcare.0 up to 3.3.5-tuxcare.1, plus listed versions 3.3.5	3.3.5-tuxcare.1
`twitter-bootstrap3` Debian:12	before 3.4.0+dfsg-1	3.4.0+dfsg-1
`twitter-bootstrap3` Debian:13	before 3.4.0+dfsg-1	3.4.0+dfsg-1
`twitter-bootstrap3` Debian:14	before 3.4.0+dfsg-1	3.4.0+dfsg-1
`twbs/bootstrap` Packagist	before 3.4.0, plus listed versions v2.2.2v2.3.0v2.3.1v2.3.2v3.0.0 Show 15 moreShow less v3.0.0-rc.2v3.0.0-rc1v3.0.1v3.0.2v3.0.3v3.1.0v3.1.1v3.2.0v3.3.0v3.3.1v3.3.2v3.3.4v3.3.5v3.3.6v3.3.7	3.4.0
`org.webjars:bootstrap` Maven	before 3.4.0, plus listed versions 1.3.02.0.22.1.12.2.12.2.2 Show 28 moreShow less 2.2.2-12.3.02.3.12.3.1-12.3.23.0.03.0.0-rc.23.0.0-rc13.0.13.0.23.0.33.1.03.1.13.1.1-13.1.1-23.2.03.2.0-13.2.0-23.3.03.3.13.3.23.3.2-13.3.2-23.3.43.3.53.3.63.3.73.3.7-1	3.4.0
`bootstrap-sass` RubyGems	before 3.4.0, plus listed versions 1.2.01.2.11.3.01.3.11.3.2 Show 45 moreShow less 1.4.01.4.11.4.21.4.31.4.42.0.02.0.12.0.22.0.32.0.3.12.0.4.02.0.4.12.0.4.22.1.0.02.1.0.12.1.1.02.2.1.02.2.1.12.2.2.02.3.0.02.3.0.12.3.1.02.3.1.22.3.1.32.3.2.02.3.2.12.3.2.23.0.0.03.0.0.0.rc3.0.0.0.rc23.0.1.03.0.1.0.rc3.0.2.03.0.2.13.0.3.03.1.0.03.1.0.13.1.0.23.1.1.03.1.1.13.2.0.43.3.0.03.3.0.13.3.1.03.3.2.0	3.4.0
`bootstrap` NuGet	before 3.4.0, plus listed versions 1.0.02.3.12.3.23.0.03.0.1 Show 14 moreShow less 3.0.23.0.33.1.03.1.13.2.03.3.03.3.13.3.23.3.43.3.53.3.63.3.6-jQuery33.3.6.13.3.7	3.4.0
`ovirt-engine-api-explorer` Red Hat:rhev_manager:4.3 From an advisory covering 3 CVEs	before 0:0.0.4-1.el7ev	0:0.0.4-1.el7ev
`ovirt-engine-api-explorer` Red Hat:rhev_manager:4.3 From an advisory covering 4 CVEs	before 0:0.0.5-1.el7ev	0:0.0.5-1.el7ev
`ovirt-engine-ui-extensions` Red Hat:rhev_manager:4.3 From an advisory covering 5 CVEs	before 0:1.0.10-1.el7ev	0:1.0.10-1.el7ev
`ipa` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client-common` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-common` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-python-compat` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaclient` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipalib` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-common` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-dns` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-trust-ad` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaserver` Red Hat:enterprise_linux:7::client From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client-common` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-common` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-debuginfo` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-python-compat` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaclient` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipalib` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-common` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-dns` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-trust-ad` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaserver` Red Hat:enterprise_linux:7::computenode From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client-common` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-common` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-python-compat` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-common` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-dns` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-trust-ad` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaclient` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipalib` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaserver` Red Hat:enterprise_linux:7::server From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-client-common` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-common` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-python-compat` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-common` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-dns` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`ipa-server-trust-ad` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaclient` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipalib` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`python2-ipaserver` Red Hat:enterprise_linux:7::workstation From an advisory covering 10 CVEs	before 0:4.6.8-5.el7	0:4.6.8-5.el7
`bind-dyndb-ldap` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:11.3-1.module+el8.3.0+6993+104f8db0	0:11.3-1.module+el8.3.0+6993+104f8db0
`bind-dyndb-ldap-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:11.3-1.module+el8.3.0+6993+104f8db0	0:11.3-1.module+el8.3.0+6993+104f8db0
`bind-dyndb-ldap-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:11.3-1.module+el8.3.0+6993+104f8db0	0:11.3-1.module+el8.3.0+6993+104f8db0
`custodia` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.6.0-3.module+el8.1.0+4098+f286395e	0:0.6.0-3.module+el8.1.0+4098+f286395e
`ipa` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-client` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-client-common` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-client-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-client-epn` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-client-samba` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-common` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-healthcheck` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.4-6.module+el8.3.0+7711+c4441980	0:0.4-6.module+el8.3.0+7711+c4441980
`ipa-healthcheck-core` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.4-6.module+el8.3.0+7711+c4441980	0:0.4-6.module+el8.3.0+7711+c4441980
`ipa-python-compat` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-selinux` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`ipa-server` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`ipa-server-common` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`ipa-server-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`ipa-server-dns` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`ipa-server-trust-ad` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`ipa-server-trust-ad-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`opendnssec` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.1.6-2.module+el8.3.0+6580+328a3362	0:2.1.6-2.module+el8.3.0+6580+328a3362
`opendnssec-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.1.6-2.module+el8.3.0+6580+328a3362	0:2.1.6-2.module+el8.3.0+6580+328a3362
`opendnssec-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.1.6-2.module+el8.3.0+6580+328a3362	0:2.1.6-2.module+el8.3.0+6580+328a3362
`python-jwcrypto` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.5.0-1.module+el8.1.0+4107+4a66eb87	0:0.5.0-1.module+el8.1.0+4107+4a66eb87
`python-kdcproxy` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.4-5.module+el8.2.0+4691+a05b2456	0:0.4-5.module+el8.2.0+4691+a05b2456
`python-qrcode` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:5.1-12.module+el8.1.0+4107+4a66eb87	0:5.1-12.module+el8.1.0+4107+4a66eb87
`python-yubico` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:1.3.2-9.module+el8.1.0+4107+4a66eb87	0:1.3.2-9.module+el8.1.0+4107+4a66eb87
`python3-custodia` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.6.0-3.module+el8.1.0+4098+f286395e	0:0.6.0-3.module+el8.1.0+4098+f286395e
`python3-ipaclient` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`python3-ipalib` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8223+6212645f	0:4.8.7-12.module+el8.3.0+8223+6212645f
`python3-ipaserver` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:4.8.7-12.module+el8.3.0+8222+c1bff54a	0:4.8.7-12.module+el8.3.0+8222+c1bff54a
`python3-jwcrypto` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.5.0-1.module+el8.1.0+4107+4a66eb87	0:0.5.0-1.module+el8.1.0+4107+4a66eb87
`python3-kdcproxy` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.4-5.module+el8.2.0+4691+a05b2456	0:0.4-5.module+el8.2.0+4691+a05b2456
`python3-pyusb` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:1.0.0-9.module+el8.1.0+4107+4a66eb87	0:1.0.0-9.module+el8.1.0+4107+4a66eb87
`python3-qrcode` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:5.1-12.module+el8.1.0+4107+4a66eb87	0:5.1-12.module+el8.1.0+4107+4a66eb87
`python3-qrcode-core` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:5.1-12.module+el8.1.0+4107+4a66eb87	0:5.1-12.module+el8.1.0+4107+4a66eb87
`python3-yubico` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:1.3.2-9.module+el8.1.0+4107+4a66eb87	0:1.3.2-9.module+el8.1.0+4107+4a66eb87
`pyusb` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:1.0.0-9.module+el8.1.0+4107+4a66eb87	0:1.0.0-9.module+el8.1.0+4107+4a66eb87
`slapi-nis` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.56.5-4.module+el8.3.0+8222+c1bff54a	0:0.56.5-4.module+el8.3.0+8222+c1bff54a
`slapi-nis-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.56.5-4.module+el8.3.0+8222+c1bff54a	0:0.56.5-4.module+el8.3.0+8222+c1bff54a
`slapi-nis-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:0.56.5-4.module+el8.3.0+8222+c1bff54a	0:0.56.5-4.module+el8.3.0+8222+c1bff54a
`softhsm` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.6.0-3.module+el8.3.0+6909+fb33717d	0:2.6.0-3.module+el8.3.0+6909+fb33717d
`softhsm-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.6.0-3.module+el8.3.0+6909+fb33717d	0:2.6.0-3.module+el8.3.0+6909+fb33717d
`softhsm-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.6.0-3.module+el8.3.0+6909+fb33717d	0:2.6.0-3.module+el8.3.0+6909+fb33717d
`softhsm-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 10 CVEs	before 0:2.6.0-3.module+el8.3.0+6909+fb33717d	0:2.6.0-3.module+el8.3.0+6909+fb33717d
`python-XStatic-Bootstrap-SCSS` Red Hat:openstack:13::el7 From an advisory covering 5 CVEs	before 0:3.4.1.0-1.el7ost	0:3.4.1.0-1.el7ost
`xstatic-bootstrap-scss-common` Red Hat:openstack:13::el7 From an advisory covering 5 CVEs	before 0:3.4.1.0-1.el7ost	0:3.4.1.0-1.el7ost
`ceph` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-base` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-base-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-common` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-common-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-debugsource` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-exporter-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-fuse` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-fuse-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-immutable-object-cache` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-immutable-object-cache-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-mds-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-mgr-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-mib` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-mon-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-osd-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-radosgw-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-resource-agents` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-selinux` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`ceph-test-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`cephadm` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`cephadm-ansible` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 0:3.0.0-1.el9cp	0:3.0.0-1.el9cp
`cephfs-mirror-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`cephfs-top` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libcephfs-devel` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libcephfs2` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libcephfs2-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libcephsqlite-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librados-devel` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librados-devel-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librados2` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librados2-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libradospp-devel` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libradosstriper1` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`libradosstriper1-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librbd-devel` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librbd1` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librbd1-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librgw-devel` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librgw2` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`librgw2-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-ceph-argparse` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-ceph-common` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-cephfs` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-cephfs-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-rados` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-rados-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-rbd` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-rbd-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-rgw` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`python3-rgw-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`rbd-fuse-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`rbd-mirror-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`rbd-nbd` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`rbd-nbd-debuginfo` Red Hat:ceph_storage:6.1::el9 From an advisory covering 5 CVEs	before 2:17.2.6-148.el9cp	2:17.2.6-148.el9cp
`custodia` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:0.6.0-3.module+el8.4.0+429+6bd33fea	0:0.6.0-3.module+el8.4.0+429+6bd33fea
`python-jwcrypto` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:0.5.0-1.module+el8.4.0+429+6bd33fea	0:0.5.0-1.module+el8.4.0+429+6bd33fea
`python-jwcrypto` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a	0:0.5.0-1.1.module+el8.7.0+1074+aae18f3a
`python-kdcproxy` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:0.4-5.module+el8.3.0+244+0b2ae752	0:0.4-5.module+el8.3.0+244+0b2ae752
`python-qrcode` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:5.1-12.module+el8.4.0+429+6bd33fea	0:5.1-12.module+el8.4.0+429+6bd33fea
`python-yubico` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:1.3.2-9.module+el8.4.0+429+6bd33fea	0:1.3.2-9.module+el8.4.0+429+6bd33fea
`python-yubico` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a	0:1.3.2-9.1.module+el8.7.0+1074+aae18f3a
`pyusb` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:1.0.0-9.module+el8.4.0+429+6bd33fea	0:1.0.0-9.module+el8.4.0+429+6bd33fea
`pyusb` Rocky Linux:8 From an advisory covering 10 CVEs	before 0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a	0:1.0.0-9.1.module+el8.7.0+1074+aae18f3a
`twitter-bootstrap` Ubuntu:16.04:LTS	All versions, plus listed versions 2.0.2+dfsg-52.0.2+dfsg-9	None known
`twitter-bootstrap3` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 3.3.5+dfsg-13.3.5+dfsg-23.3.6+dfsg-13.3.6+dfsg-1ubuntu0.1~esm1	None known
`twitter-bootstrap` Ubuntu:18.04:LTS	All versions, plus listed versions 2.0.2+dfsg-10	None known
`twitter-bootstrap3` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 3.3.7+dfsg-23.3.7+dfsg-2ubuntu0.1~esm1	None known
`twitter-bootstrap4` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 4.3.1+dfsg2-44.4.1+dfsg1-14.4.1+dfsg1-24.4.1+dfsg1-2ubuntu0.1~esm1	None known
`twitter-bootstrap4` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 4.5.2+dfsg1-84.6.0+dfsg1-34.6.0+dfsg1-44.6.0+dfsg1-4ubuntu0.1~esm1	None known
`twitter-bootstrap4` Ubuntu:24.04:LTS	All versions, plus listed versions 4.6.1+dfsg1-44.6.1+dfsg1-4+deb12u1build0.24.04.1	None known
`twitter-bootstrap4` Ubuntu:25.10	All versions, plus listed versions 4.6.1+dfsg1-54.6.2+dfsg-1	None known
`twitter-bootstrap4` Ubuntu:26.10	All versions, plus listed versions 4.6.2+dfsg-2	None known
`twitter-bootstrap4` Ubuntu:26.04:LTS	All versions, plus listed versions 4.6.2+dfsg-14.6.2+dfsg-2	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected
Nov 5, 2026	facts	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2018-20677 is a medium vulnerability (CVSS 6.1) in Getbootstrap Bootstrap, published January 9, 2019. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.98%, the 90th percentile. Fixed in bootstrap 3.4.0.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 7 versions and 94 references. The JSON record has them.