CVE-2022-22577

Cross-site Scripting Vulnerability in Action Pack

6.1 MediumFix available

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: Required

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: None

Exploit likelihood

1.83%Up 0.9 points since May 27, 2022

What each source reports

NVD Score used 6.1

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Record: CVE-2022-22577
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0: 4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Weakness: CWE-79
Updated: 2026-11-02

CVE List No score

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Record: CVE-2022-22577
Weakness: CWE-79
Updated: 2026-11-02

EUVDEUVD-2022-1786 No score

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Record: EUVD-2022-1786
Updated: 2026-11-03

GitHub AdvisoriesGHSA-mm33-5vfq-3mm3 6.1

Cross-site Scripting Vulnerability in Action Pack

There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has been assigned the CVE identifier CVE-2022-22577.

Versions Affected: >= 5.2.0 Not affected: < 5.2.0 Fixed Versions: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1

Impact

CSP headers were only sent along with responses that Rails considered as "HTML" responses. This left API requests without CSP headers, which could possibly expose users to XSS attacks.

Releases

The FIXED releases are available at the normal locations.

Workarounds

Set a CSP for your API responses manually.

Record: GHSA-mm33-5vfq-3mm3
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Updated: 2026-11-02

OSV 6.1

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Record: CVE-2022-22577
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVDEBIAN-CVE-2022-22577 6.1

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Record: DEBIAN-CVE-2022-22577
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-03

Show 4 moreShow less

OSVGHSA-mm33-5vfq-3mm3 6.1

Cross-site Scripting Vulnerability in Action Pack

There is a possible XSS vulnerability in Rails / Action Pack. This vulnerability has been assigned the CVE identifier CVE-2022-22577.

Versions Affected: >= 5.2.0 Not affected: < 5.2.0 Fixed Versions: 7.0.2.4, 6.1.5.1, 6.0.4.8, 5.2.7.1

Impact

CSP headers were only sent along with responses that Rails considered as "HTML" responses. This left API requests without CSP headers, which could possibly expose users to XSS attacks.

Releases

The FIXED releases are available at the normal locations.

Workarounds

Set a CSP for your API responses manually.

Record: GHSA-mm33-5vfq-3mm3
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness: CWE-79
Updated: 2026-11-02

OSVRHSA-2023:2097 9.8

Red Hat Security Advisory: Satellite 6.13 Release

Record: RHSA-2023:2097
CVSS 3.1: 9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVUBUNTU-CVE-2022-22577 6.1

An XSS Vulnerability in Action Pack >= 5.2.0 and < 5.2.0 that could allow an attacker to bypass CSP for non HTML like responses.

Record: UBUNTU-CVE-2022-22577
CVSS 3.1: 6.1 MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Updated: 2026-11-02

OSVRLSA-2023:2097 No score

Important: Satellite 6.13 Release

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws
CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack
CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting
CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service
CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service
CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting
CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution
CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record
CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults
CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs
CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
CVE-2022-42003 CVE-2022-42004 candlepin: various flaws
CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE
CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers
CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

The items above are not a complete list of changes. This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document.

Record: RLSA-2023:2097
Updated: 2026-11-02

Affected products

Affected packages

Affected packages
Package	Affected	Fixed
`actionpack` RubyGems	5.2.0 to 5.2.7.0	5.2.7.1
`actionpack` RubyGems	6.0.0 to 6.0.4.7	6.0.4.8
`actionpack` RubyGems	6.1.0 to 6.1.5.0	6.1.5.1
`actionpack` RubyGems	7.0.0 to 7.0.2.3	7.0.2.4
`rails` Debian:12	before 2:6.1.6.1+dfsg-1	2:6.1.6.1+dfsg-1
`rails` Debian:13	before 2:6.1.6.1+dfsg-1	2:6.1.6.1+dfsg-1
`rails` Debian:14	before 2:6.1.6.1+dfsg-1	2:6.1.6.1+dfsg-1
`rails` Debian:10 From an advisory covering 4 CVEs	before 2:5.2.2.1+dfsg-1+deb10u4, plus listed versions 2:5.2.2.1+dfsg-12:5.2.2.1+dfsg-1+deb10u12:5.2.2.1+dfsg-1+deb10u22:5.2.2.1+dfsg-1+deb10u3	2:5.2.2.1+dfsg-1+deb10u4
`rails` Debian:11 From an advisory covering 10 CVEs	before 2:6.0.3.7+dfsg-2+deb11u1, plus listed versions 2:6.0.3.7+dfsg-2	2:6.0.3.7+dfsg-2+deb11u1
`actionpack` RubyGems	5.2.0 up to 5.2.7.1, plus listed versions 5.2.15.2.1.15.2.1.rc15.2.25.2.2.1 Show 17 moreShow less 5.2.2.rc15.2.35.2.3.rc15.2.45.2.4.15.2.4.25.2.4.35.2.4.45.2.4.55.2.4.65.2.4.rc15.2.55.2.65.2.6.15.2.6.25.2.6.35.2.7	5.2.7.1

Show 290 moreShow less

Affected packages
Package	Affected	Fixed
`actionpack` RubyGems	6.0.0 up to 6.0.4.8, plus listed versions 6.0.16.0.1.rc16.0.26.0.2.16.0.2.2 Show 19 moreShow less 6.0.2.rc16.0.2.rc26.0.36.0.3.16.0.3.26.0.3.36.0.3.46.0.3.56.0.3.66.0.3.76.0.3.rc16.0.46.0.4.16.0.4.26.0.4.36.0.4.46.0.4.56.0.4.66.0.4.7	6.0.4.8
`actionpack` RubyGems	6.1.0 up to 6.1.5.1, plus listed versions 6.1.16.1.26.1.2.16.1.36.1.3.1 Show 10 moreShow less 6.1.3.26.1.46.1.4.16.1.4.26.1.4.36.1.4.46.1.4.56.1.4.66.1.4.76.1.5	6.1.5.1
`actionpack` RubyGems	7.0.0 up to 7.0.2.4, plus listed versions 7.0.17.0.27.0.2.17.0.2.27.0.2.3	7.0.2.4
`ansible-collection-redhat-satellite` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.9.0-2.el8sat	0:3.9.0-2.el8sat
`ansible-collection-redhat-satellite_operations` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3.0-2.el8sat	0:1.3.0-2.el8sat
`ansible-lint` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.0.8-4.el8pc	0:5.0.8-4.el8pc
`ansible-runner` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.2.1-3.el8sat	0:2.2.1-3.el8sat
`ansiblerole-foreman_scap_client` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.0-2.el8sat	0:0.2.0-2.el8sat
`ansiblerole-insights-client` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.1-2.el8sat	0:1.7.1-2.el8sat
`cjson` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.14-5.el8sat	0:1.7.14-5.el8sat
`cjson-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.14-5.el8sat	0:1.7.14-5.el8sat
`cjson-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.14-5.el8sat	0:1.7.14-5.el8sat
`createrepo_c` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-libs` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-libs-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`dynflow-utils` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.6.3-1.el8sat	0:1.6.3-1.el8sat
`foreman` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1.14-1.el8sat	0:3.5.1.14-1.el8sat
`foreman-bootloaders-redhat` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:202102220000-1.el8sat	0:202102220000-1.el8sat
`foreman-bootloaders-redhat-tftpboot` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:202102220000-1.el8sat	0:202102220000-1.el8sat
`foreman-debug` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1.14-1.el8sat	0:3.5.1.14-1.el8sat
`foreman-discovery-image` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 1:4.1.0-10.el8sat	1:4.1.0-10.el8sat
`foreman-discovery-image-service` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.0-4.1.el8sat	0:1.0.0-4.1.el8sat
`foreman-discovery-image-service-tui` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.0-4.1.el8sat	0:1.0.0-4.1.el8sat
`foreman-installer` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 1:3.5.2.1-1.el8sat	1:3.5.2.1-1.el8sat
`foreman-installer-katello` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 1:3.5.2.1-1.el8sat	1:3.5.2.1-1.el8sat
`foreman-proxy` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1-1.el8sat	0:3.5.1-1.el8sat
`foreman-proxy-content` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.7.0-1.el8sat	0:4.7.0-1.el8sat
`foreman-proxy-journald` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1-1.el8sat	0:3.5.1-1.el8sat
`katello` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.7.0-1.el8sat	0:4.7.0-1.el8sat
`katello-certs-tools` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.9.0-1.el8sat	0:2.9.0-1.el8sat
`katello-client-bootstrap` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.9-1.el8sat	0:1.7.9-1.el8sat
`katello-common` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.7.0-1.el8sat	0:4.7.0-1.el8sat
`katello-debug` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.7.0-1.el8sat	0:4.7.0-1.el8sat
`libcomps` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.1.18-4.el8pc	0:0.1.18-4.el8pc
`libcomps-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.1.18-4.el8pc	0:0.1.18-4.el8pc
`libcomps-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.1.18-4.el8pc	0:0.1.18-4.el8pc
`libdb-cxx` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-cxx-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-java-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-sql-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-sql-devel-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-tcl-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libdb-utils-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.3.28-42.el8_4	0:5.3.28-42.el8_4
`libsodium` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.17-3.el8sat	0:1.0.17-3.el8sat
`libsodium-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.17-3.el8sat	0:1.0.17-3.el8sat
`libsodium-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.17-3.el8sat	0:1.0.17-3.el8sat
`libsolv` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.22-4.el8pc	0:0.7.22-4.el8pc
`libsolv-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.22-4.el8pc	0:0.7.22-4.el8pc
`libsolv-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.22-4.el8pc	0:0.7.22-4.el8pc
`libsolv-demo-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.22-4.el8pc	0:0.7.22-4.el8pc
`libsolv-tools-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.22-4.el8pc	0:0.7.22-4.el8pc
`libwebsockets` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.4.2-2.el8	0:2.4.2-2.el8
`libwebsockets-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.4.2-2.el8	0:2.4.2-2.el8
`libwebsockets-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.4.2-2.el8	0:2.4.2-2.el8
`libwebsockets-tests-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.4.2-2.el8	0:2.4.2-2.el8
`mosquitto` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.14-1.el8sat	0:2.0.14-1.el8sat
`mosquitto-debuginfo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.14-1.el8sat	0:2.0.14-1.el8sat
`mosquitto-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.14-1.el8sat	0:2.0.14-1.el8sat
`pulpcore-selinux` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3.2-1.el8pc	0:1.3.2-1.el8pc
`puppet-agent` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:7.12.1-1.el8sat	0:7.12.1-1.el8sat
`puppet-agent-oauth` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.5.10-1.el8sat	0:0.5.10-1.el8sat
`puppet-foreman_scap_client` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.0-1.el8sat	0:0.4.0-1.el8sat
`puppetlabs-stdlib` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.2.0-1.el8sat	0:5.2.0-1.el8sat
`puppetserver` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:7.9.3-1.el8sat	0:7.9.3-1.el8sat
`python-aiodns` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.0.0-3.el8pc	0:3.0.0-3.el8pc
`python-aiofiles` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:22.1.0-1.el8pc	0:22.1.0-1.el8pc
`python-aiohttp` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.8.1-3.el8pc	0:3.8.1-3.el8pc
`python-aiohttp-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.8.1-3.el8pc	0:3.8.1-3.el8pc
`python-aiohttp-xmlrpc` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.5.0-2.el8pc	0:1.5.0-2.el8pc
`python-aioredis` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.1-2.el8pc	0:2.0.1-2.el8pc
`python-aiosignal` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.2.0-2.el8pc	0:1.2.0-2.el8pc
`python-ansible-builder` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.1-4.el8pc	0:1.0.1-4.el8pc
`python-asgiref` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.2-1.el8pc	0:3.5.2-1.el8pc
`python-async-lru` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.3-1.el8pc	0:1.0.3-1.el8pc
`python-async-timeout` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.0.2-2.el8pc	0:4.0.2-2.el8pc
`python-asyncio-throttle` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.2-3.el8pc	0:1.0.2-3.el8pc
`python-attrs` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:21.4.0-2.el8pc	0:21.4.0-2.el8pc
`python-backoff` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1.2-1.el8pc	0:2.1.2-1.el8pc
`python-bindep` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.11.0-2.el8pc	0:2.11.0-2.el8pc
`python-bleach` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.3.1-2.el8pc	0:3.3.1-2.el8pc
`python-bleach-allowlist` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.3-3.el8pc	0:1.0.3-3.el8pc
`python-bracex` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.2.1-2.el8pc	0:2.2.1-2.el8pc
`python-brotli` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.9-2.el8pc	0:1.0.9-2.el8pc
`python-brotli-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.9-2.el8pc	0:1.0.9-2.el8pc
`python-cchardet` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1.7-4.el8pc	0:2.1.7-4.el8pc
`python-cchardet-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1.7-4.el8pc	0:2.1.7-4.el8pc
`python-certifi` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2020.6.20-3.el8pc	0:2020.6.20-3.el8pc
`python-cffi` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.15.1-1.el8pc	0:1.15.1-1.el8pc
`python-cffi-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.15.1-1.el8pc	0:1.15.1-1.el8pc
`python-chardet` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.0.0-1.el8pc	0:5.0.0-1.el8pc
`python-charset-normalizer` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1.1-1.el8pc	0:2.1.1-1.el8pc
`python-click` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:8.1.3-1.el8pc	0:8.1.3-1.el8pc
`python-click-shell` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1-3.el8pc	0:2.1-3.el8pc
`python-colorama` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.4-3.el8pc	0:0.4.4-3.el8pc
`python-commonmark` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.9.1-5.el8pc	0:0.9.1-5.el8pc
`python-contextlib2` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:21.6.0-3.el8pc	0:21.6.0-3.el8pc
`python-cryptography` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.4.8-1.el8pc	0:3.4.8-1.el8pc
`python-cryptography-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.4.8-1.el8pc	0:3.4.8-1.el8pc
`python-daemon` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.3.1-1.1.el8sat	0:2.3.1-1.1.el8sat
`python-dataclasses` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.8-3.el8pc	0:0.8-3.el8pc
`python-dateutil` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.8.2-2.el8pc	0:2.8.2-2.el8pc
`python-debian` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.1.43-2.el8pc	0:0.1.43-2.el8pc
`python-defusedxml` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.1-3.el8pc	0:0.7.1-3.el8pc
`python-deprecated` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.2.13-1.el8pc	0:1.2.13-1.el8pc
`python-diff-match-patch` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:20200713-3.el8pc	0:20200713-3.el8pc
`python-distro` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.0-1.el8pc	0:1.7.0-1.el8pc
`python-django` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.2.18-1.el8pc	0:3.2.18-1.el8pc
`python-django-currentuser` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.5.3-5.el8pc	0:0.5.3-5.el8pc
`python-django-filter` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:22.1-2.el8pc	0:22.1-2.el8pc
`python-django-guid` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.3.0-1.el8pc	0:3.3.0-1.el8pc
`python-django-import-export` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.8.0-1.el8pc	0:2.8.0-1.el8pc
`python-django-lifecycle` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.0-1.el8pc	0:1.0.0-1.el8pc
`python-django-readonly-field` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.1-3.el8pc	0:1.1.1-3.el8pc
`python-djangorestframework` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.13.1-2.el8pc	0:3.13.1-2.el8pc
`python-djangorestframework-queryfields` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.0-5.el8pc	0:1.0.0-5.el8pc
`python-docutils` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.19-1.1.el8sat	0:0.19-1.1.el8sat
`python-drf-access-policy` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.2-1.el8pc	0:1.1.2-1.el8pc
`python-drf-nested-routers` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.93.4-3.el8pc	0:0.93.4-3.el8pc
`python-drf-spectacular` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.23.1-1.el8pc	0:0.23.1-1.el8pc
`python-dynaconf` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.1.9-1.el8pc	0:3.1.9-1.el8pc
`python-ecdsa` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.14.1-2.el8pc	0:0.14.1-2.el8pc
`python-enrich` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.2.6-5.el8pc	0:1.2.6-5.el8pc
`python-et-xmlfile` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.0-2.el8pc	0:1.1.0-2.el8pc
`python-flake8` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.9.2-5.el8pc	0:3.9.2-5.el8pc
`python-frozenlist` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3.0-2.el8pc	0:1.3.0-2.el8pc
`python-frozenlist-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3.0-2.el8pc	0:1.3.0-2.el8pc
`python-future` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.18.2-5.el8pc	0:0.18.2-5.el8pc
`python-galaxy-importer` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.5-1.el8pc	0:0.4.5-1.el8pc
`python-gitdb` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.0.9-2.el8pc	0:4.0.9-2.el8pc
`python-gitpython` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.1.26-3.el8pc	0:3.1.26-3.el8pc
`python-gnupg` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.5.0-1.el8pc	0:0.5.0-1.el8pc
`python-gunicorn` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:20.1.0-5.el8pc	0:20.1.0-5.el8pc
`python-idna` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.3-2.el8pc	0:3.3-2.el8pc
`python-idna-ssl` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.0-5.el8pc	0:1.1.0-5.el8pc
`python-importlib-metadata` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.10.1-2.el8pc	0:4.10.1-2.el8pc
`python-inflection` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.5.1-3.el8pc	0:0.5.1-3.el8pc
`python-iniparse` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4-35.el8pc	0:0.4-35.el8pc
`python-jinja2` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.1.2-1.el8pc	0:3.1.2-1.el8pc
`python-jsonschema` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.9.1-1.el8pc	0:4.9.1-1.el8pc
`python-lockfile` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.12.2-1.el8sat	0:0.12.2-1.el8sat
`python-lxml` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.7.1-2.el8pc	0:4.7.1-2.el8pc
`python-lxml-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.7.1-2.el8pc	0:4.7.1-2.el8pc
`python-markdown` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.3.6-3.el8pc	0:3.3.6-3.el8pc
`python-markuppy` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.14-3.el8pc	0:1.14-3.el8pc
`python-markupsafe` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.1-3.el8pc	0:2.0.1-3.el8pc
`python-markupsafe-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.1-3.el8pc	0:2.0.1-3.el8pc
`python-mccabe` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.6.1-3.el8pc	0:0.6.1-3.el8pc
`python-multidict` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:6.0.2-2.el8pc	0:6.0.2-2.el8pc
`python-multidict-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:6.0.2-2.el8pc	0:6.0.2-2.el8pc
`python-naya` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.1-3.el8pc	0:1.1.1-3.el8pc
`python-odfpy` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.4.1-6.el8pc	0:1.4.1-6.el8pc
`python-openpyxl` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.0.9-2.el8pc	0:3.0.9-2.el8pc
`python-packaging` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:21.3-1.1.el8sat	0:21.3-1.1.el8sat
`python-parsley` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3-2.el8pc	0:1.3-2.el8pc
`python-pbr` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.8.0-4.el8pc	0:5.8.0-4.el8pc
`python-pexpect` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.8.0-2.el8sat	0:4.8.0-2.el8sat
`python-productmd` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.33-3.el8pc	0:1.33-3.el8pc
`python-protobuf` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.21.6-1.el8pc	0:4.21.6-1.el8pc
`python-psycopg2` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.9.3-2.el8pc	0:2.9.3-2.el8pc
`python-psycopg2-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.9.3-2.el8pc	0:2.9.3-2.el8pc
`python-ptyprocess` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.7.0-1.el8sat	0:0.7.0-1.el8sat
`python-pulp-ansible` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 1:0.15.0-1.el8pc	1:0.15.0-1.el8pc
`python-pulp-certguard` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.5.5-1.el8pc	0:1.5.5-1.el8pc
`python-pulp-cli` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.14.0-4.el8pc	0:0.14.0-4.el8pc
`python-pulp-container` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.14.3-1.el8pc	0:2.14.3-1.el8pc
`python-pulp-deb` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.20.0-1.el8pc	0:2.20.0-1.el8pc
`python-pulp-file` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.11.1-1.el8pc	0:1.11.1-1.el8pc
`python-pulp-rpm` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.18.11-1.el8pc	0:3.18.11-1.el8pc
`python-pulpcore` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.21.6-1.el8pc	0:3.21.6-1.el8pc
`python-pyOpenSSL` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:19.1.0-3.el8pc	0:19.1.0-3.el8pc
`python-pycairo` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.20.1-3.el8pc	0:1.20.1-3.el8pc
`python-pycairo-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.20.1-3.el8pc	0:1.20.1-3.el8pc
`python-pycares` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.1.2-2.el8pc	0:4.1.2-2.el8pc
`python-pycares-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.1.2-2.el8pc	0:4.1.2-2.el8pc
`python-pycodestyle` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.7.0-5.el8pc	0:2.7.0-5.el8pc
`python-pycparser` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.21-2.el8pc	0:2.21-2.el8pc
`python-pycryptodomex` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.14.1-2.el8pc	0:3.14.1-2.el8pc
`python-pycryptodomex-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:3.14.1-2.el8pc	0:3.14.1-2.el8pc
`python-pyflakes` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.3.1-5.el8pc	0:2.3.1-5.el8pc
`python-pygments` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.11.2-2.el8pc	0:2.11.2-2.el8pc
`python-pygobject` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 1:3.40.1-4.el8pc	1:3.40.1-4.el8pc
`python-pygobject-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 1:3.40.1-4.el8pc	1:3.40.1-4.el8pc
`python-pygtrie` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.5.0-1.el8pc	0:2.5.0-1.el8pc
`python-pyjwkest` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.4.2-6.el8pc	0:1.4.2-6.el8pc
`python-pyjwt` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.5.0-2.el8pc	0:2.5.0-2.el8pc
`python-pyparsing` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.4.7-3.el8pc	0:2.4.7-3.el8pc
`python-pyrsistent` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.18.1-2.el8pc	0:0.18.1-2.el8pc
`python-pyrsistent-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.18.1-2.el8pc	0:0.18.1-2.el8pc
`python-pytz` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2022.2.1-1.el8pc	0:2022.2.1-1.el8pc
`python-pyyaml` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:5.4.1-4.el8pc	0:5.4.1-4.el8pc
`python-qpid` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.37.0-1.el8	0:1.37.0-1.el8
`python-redis` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:4.3.4-1.el8pc	0:4.3.4-1.el8pc
`python-requests` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:2.28.1-1.el8pc	0:2.28.1-1.el8pc
`python-requirements-parser` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.0-3.el8pc	0:0.2.0-3.el8pc
`python-rhsm` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.19.2-3.el8pc	0:1.19.2-3.el8pc
`python-rhsm-debugsource` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:1.19.2-3.el8pc	0:1.19.2-3.el8pc
`python-rich` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:10.12.0-3.el8pc	0:10.12.0-3.el8pc
`python-ruamel-yaml` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.17.20-2.el8pc	0:0.17.20-2.el8pc
`python-ruamel-yaml-clib` Red Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.6-2.el8pc	0:0.2.6-2.el8pc
`rubygem-clamp` Red Hat:satellite_maintenance:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.2-7.el8sat	0:1.1.2-7.el8sat
`rubygem-foreman_maintain` Red Hat:satellite_maintenance:6.13::el8 From an advisory covering 26 CVEs	before 1:1.2.8-1.el8sat	1:1.2.8-1.el8sat
`rubygem-highline` Red Hat:satellite_maintenance:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.3-2.el8sat	0:2.0.3-2.el8sat
`satellite-clone` Red Hat:satellite_maintenance:6.13::el8 From an advisory covering 26 CVEs	before 0:3.3.0-1.el8sat	0:3.3.0-1.el8sat
`satellite-maintain` Red Hat:satellite_maintenance:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.1-1.el8sat	0:0.0.1-1.el8sat
`foreman` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1.14-1.el8sat	0:3.5.1.14-1.el8sat
`foreman-cli` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1.14-1.el8sat	0:3.5.1.14-1.el8sat
`python-pulp_manifest` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.0.0-3.el8pc	0:3.0.0-3.el8pc
`python39-pulp_manifest` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.0.0-3.el8pc	0:3.0.0-3.el8pc
`rubygem-amazing_print` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.4.0-1.el8sat	0:1.4.0-1.el8sat
`rubygem-apipie-bindings` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.6.0-1.el8sat	0:0.6.0-1.el8sat
`rubygem-clamp` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.2-7.el8sat	0:1.1.2-7.el8sat
`rubygem-domain_name` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.5.20190701-1.el8sat	0:0.5.20190701-1.el8sat
`rubygem-fast_gettext` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.8.0-1.el8sat	0:1.8.0-1.el8sat
`rubygem-ffi` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.15.5-1.el8sat	0:1.15.5-1.el8sat
`rubygem-ffi-debuginfo` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.15.5-1.el8sat	0:1.15.5-1.el8sat
`rubygem-ffi-debugsource` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.15.5-1.el8sat	0:1.15.5-1.el8sat
`rubygem-gssapi` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3.1-1.el8sat	0:1.3.1-1.el8sat
`rubygem-hammer_cli` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1-1.el8sat	0:3.5.1-1.el8sat
`rubygem-hammer_cli_foreman` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1-1.el8sat	0:3.5.1-1.el8sat
`rubygem-hammer_cli_foreman_admin` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.0-1.el8sat	0:1.1.0-1.el8sat
`rubygem-hammer_cli_foreman_ansible` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.0-2.el8sat	0:0.4.0-2.el8sat
`rubygem-hammer_cli_foreman_azure_rm` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.2-1.el8sat	0:0.2.2-1.el8sat
`rubygem-hammer_cli_foreman_bootdisk` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.3.0-3.el8sat	0:0.3.0-3.el8sat
`rubygem-hammer_cli_foreman_discovery` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.0-1.el8sat	0:1.1.0-1.el8sat
`rubygem-hammer_cli_foreman_google` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.0-1.el8sat	0:1.0.0-1.el8sat
`rubygem-hammer_cli_foreman_openscap` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.1.13-2.el8sat	0:0.1.13-2.el8sat
`rubygem-hammer_cli_foreman_remote_execution` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.2-1.el8sat	0:0.2.2-1.el8sat
`rubygem-hammer_cli_foreman_tasks` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.18-1.el8sat	0:0.0.18-1.el8sat
`rubygem-hammer_cli_foreman_templates` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.0-3.el8sat	0:0.2.0-3.el8sat
`rubygem-hammer_cli_foreman_virt_who_configure` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.9-2.el8sat	0:0.0.9-2.el8sat
`rubygem-hammer_cli_foreman_webhooks` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.4-1.el8sat	0:0.0.4-1.el8sat
`rubygem-hammer_cli_katello` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.3-1.el8sat	0:1.7.3-1.el8sat
`rubygem-hashie` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:5.0.0-1.el8sat	0:5.0.0-1.el8sat
`rubygem-highline` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.3-2.el8sat	0:2.0.3-2.el8sat
`rubygem-http-accept` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.0-1.el8sat	0:1.7.0-1.el8sat
`rubygem-http-cookie` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.5-1.el8sat	0:1.0.5-1.el8sat
`rubygem-jwt` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.5.0-1.el8sat	0:2.5.0-1.el8sat
`rubygem-little-plugger` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.4-3.el8sat	0:1.1.4-3.el8sat
`rubygem-locale` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1.3-1.el8sat	0:2.1.3-1.el8sat
`rubygem-logging` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.3.1-1.el8sat	0:2.3.1-1.el8sat
`rubygem-mime-types` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.4.1-1.el8sat	0:3.4.1-1.el8sat
`rubygem-mime-types-data` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:3.2022.0105-1.el8sat	0:3.2022.0105-1.el8sat
`rubygem-multi_json` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.15.0-1.el8sat	0:1.15.0-1.el8sat
`rubygem-netrc` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.11.0-6.el8sat	0:0.11.0-6.el8sat
`rubygem-oauth` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.0-1.el8sat	0:1.1.0-1.el8sat
`rubygem-oauth-tty` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.0.5-1.el8sat	0:1.0.5-1.el8sat
`rubygem-powerbar` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.1-3.el8sat	0:2.0.1-3.el8sat
`rubygem-rest-client` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.1.0-1.el8sat	0:2.1.0-1.el8sat
`rubygem-snaky_hash` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:2.0.1-1.el8sat	0:2.0.1-1.el8sat
`rubygem-unf` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.1.4-1.el8sat	0:0.1.4-1.el8sat
`rubygem-unf_ext` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.8.2-1.el8sat	0:0.0.8.2-1.el8sat
`rubygem-unf_ext-debuginfo` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.8.2-1.el8sat	0:0.0.8.2-1.el8sat
`rubygem-unf_ext-debugsource` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.0.8.2-1.el8sat	0:0.0.8.2-1.el8sat
`rubygem-unicode` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.4.4-4.1.el8sat	0:0.4.4.4-4.1.el8sat
`rubygem-unicode-debuginfo` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.4.4-4.1.el8sat	0:0.4.4.4-4.1.el8sat
`rubygem-unicode-debugsource` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:0.4.4.4-4.1.el8sat	0:0.4.4.4-4.1.el8sat
`rubygem-unicode-display_width` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.8.0-1.el8sat	0:1.8.0-1.el8sat
`rubygem-version_gem` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:1.1.1-1.el8sat	0:1.1.1-1.el8sat
`satellite` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:6.13.0-6.el8sat	0:6.13.0-6.el8sat
`satellite-cli` Red Hat:satellite_utils:6.13::el8 From an advisory covering 26 CVEs	before 0:6.13.0-6.el8sat	0:6.13.0-6.el8sat
`ansible-collection-redhat-satellite` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:3.9.0-2.el8sat	0:3.9.0-2.el8sat
`ansible-collection-redhat-satellite_operations` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:1.3.0-2.el8sat	0:1.3.0-2.el8sat
`ansible-lint` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:5.0.8-4.el8pc	0:5.0.8-4.el8pc
`ansible-runner` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:2.2.1-3.el8sat	0:2.2.1-3.el8sat
`ansiblerole-foreman_scap_client` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:0.2.0-2.el8sat	0:0.2.0-2.el8sat
`ansiblerole-insights-client` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.1-2.el8sat	0:1.7.1-2.el8sat
`candlepin` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:4.2.13-1.el8sat	0:4.2.13-1.el8sat
`candlepin-selinux` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:4.2.13-1.el8sat	0:4.2.13-1.el8sat
`cjson` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.14-5.el8sat	0:1.7.14-5.el8sat
`cjson-debuginfo` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.14-5.el8sat	0:1.7.14-5.el8sat
`cjson-debugsource` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:1.7.14-5.el8sat	0:1.7.14-5.el8sat
`createrepo_c` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-debuginfo` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-debugsource` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-libs` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`createrepo_c-libs-debuginfo` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:0.20.1-1.el8pc	0:0.20.1-1.el8pc
`dynflow-utils` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:1.6.3-1.el8sat	0:1.6.3-1.el8sat
`foreman` Red Hat:satellite:6.13::el8 From an advisory covering 26 CVEs	before 0:3.5.1.14-1.el8sat	0:3.5.1.14-1.el8sat
`rails` Ubuntu:Pro:16.04:LTS	All versions, plus listed versions 2:4.1.10-12:4.2.5-12:4.2.5.1-12:4.2.5.2-22:4.2.6-12:4.2.6-1ubuntu0.1~esm12:4.2.6-1ubuntu0.1~esm2	None known
`rails` Ubuntu:Pro:18.04:LTS	All versions, plus listed versions 2:4.2.9-22:4.2.9-42:4.2.10-0ubuntu42:4.2.10-0ubuntu4+esm12:4.2.10-0ubuntu4+esm2	None known
`rails` Ubuntu:Pro:20.04:LTS	All versions, plus listed versions 2:5.2.2.1+dfsg-1ubuntu12:5.2.3+dfsg-32:5.2.3+dfsg-3ubuntu0.1~esm1	None known
`rails` Ubuntu:Pro:22.04:LTS	All versions, plus listed versions 2:6.0.3.7+dfsg-22:6.1.4.1+dfsg-8ubuntu22:6.1.4.1+dfsg-8ubuntu2+esm1	None known
`rails` Ubuntu:24.04:LTS	All versions, plus listed versions 2:6.1.7.3+dfsg-2build12:6.1.7.3+dfsg-3	None known
`rails` Ubuntu:25.10	All versions, plus listed versions 2:6.1.7.3+dfsg-72:7.2.2.1+dfsg-7	None known
`rails` Ubuntu:26.10	All versions, plus listed versions 2:7.2.3+dfsg-22:7.2.3.2+dfsg-2	None known
`rails` Ubuntu:26.04:LTS	All versions, plus listed versions 2:7.2.2.1+dfsg-72:7.2.2.2+dfsg-22:7.2.3+dfsg-2	None known

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts	OSV
Nov 3, 2026	aliases, products	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-22577 is a medium vulnerability (CVSS 6.1) in Debian Linux, published April 27, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.83%, the 78th percentile. Fixed in actionpack 5.2.7.1.

References

Show 194 moreShow less

This page doesn't list everything

Left out here: 182 package rows and 185 references. The JSON record has them. Also not on the record: 957 package claims. ID and package lookups still check them.