Every CVE Search/ Get API key

CVE-2022-23517

Inefficient Regular Expression Complexity in rails-html-sanitizer

7.5 HighFix available

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

1.58%Up 0.6 points since Dec 15, 2022
90%50%10%1%

What each source reports

CVE List Score used 7.5

Inefficient Regular Expression Complexity in rails-html-sanitizer

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Record
CVE-2022-23517
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
EUVDEUVD-2022-7520 7.5

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Record
EUVD-2022-7520
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-5x79-w82f-gw8w 7.5

Inefficient Regular Expression Complexity in rails-html-sanitizer

Summary

Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption.

Mitigation

Upgrade to rails-html-sanitizer >= 1.4.4.

Severity

The maintainers have evaluated this as High Severity 7.5 (CVSS3.1).

References

Credit

This vulnerability was responsibly reported by @ooooooo-q (https://github.com/ooooooo-q).

Record
GHSA-5x79-w82f-gw8w
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
NVD 7.5

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Record
CVE-2022-23517
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
OSV 7.5

Inefficient Regular Expression Complexity in rails-html-sanitizer

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Record
CVE-2022-23517
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
OSVGHSA-5x79-w82f-gw8w 7.5

Inefficient Regular Expression Complexity in rails-html-sanitizer

Summary

Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption.

Mitigation

Upgrade to rails-html-sanitizer >= 1.4.4.

Severity

The maintainers have evaluated this as High Severity 7.5 (CVSS3.1).

References

Credit

This vulnerability was responsibly reported by @ooooooo-q (https://github.com/ooooooo-q).

Record
GHSA-5x79-w82f-gw8w
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
Show 10 moreShow less
OSVRHSA-2023:2097 9.8

Red Hat Security Advisory: Satellite 6.13 Release

Record
RHSA-2023:2097
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-23517 7.5

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Record
UBUNTU-CVE-2022-23517
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2022-23517 No score

rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications. Certain configurations of rails-html-sanitizer < 1.4.4 use an inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. This may lead to a denial of service through CPU resource consumption. This issue has been patched in version 1.4.4.

Record
DEBIAN-CVE-2022-23517
Updated
2026-11-03
OSVopenSUSE-SU-2024:12769-1 No score

ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 on GA media

These are all security issues fixed in the ruby3.1-rubygem-rails-html-sanitizer-1.5.0-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12769-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:14175-1 No score

ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 on GA media

These are all security issues fixed in the ruby3.3-rubygem-rails-html-sanitizer-1.6.0-1.5 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:14175-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15125-1 No score

ruby3.4-rubygem-rails-html-sanitizer-1.6.0-1.7 on GA media

These are all security issues fixed in the ruby3.4-rubygem-rails-html-sanitizer-1.6.0-1.7 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15125-1
Updated
2026-11-02
OSVopenSUSE-SU-2026:10361-1 No score

ruby4.0-rubygem-rails-html-sanitizer-1.6.0-1.9 on GA media

These are all security issues fixed in the ruby4.0-rubygem-rails-html-sanitizer-1.6.0-1.9 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2026:10361-1
Updated
2026-11-02
OSVRLSA-2023:2097 No score

Important: Satellite 6.13 Release

Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.

Security Fix(es):

  • CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws
  • CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack
  • CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
  • CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting
  • CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service
  • CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service
  • CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting
  • CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
  • CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
  • CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
  • CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution
  • CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record
  • CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults
  • CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs
  • CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
  • CVE-2022-42003 CVE-2022-42004 candlepin: various flaws
  • CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE
  • CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
  • CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers
  • CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

The items above are not a complete list of changes. This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document.

Record
RLSA-2023:2097
Updated
2026-11-02
OSVSUSE-SU-2023:3534-1 No score

Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issues:

  • CVE-2022-23517: Fixed inefficient regular expression that is susceptible to excessive backtracking (bsc#1206433).
  • CVE-2022-23518: Fixed XSS via data URIs when used in combination with Loofah (bsc#1206434).
  • CVE-2022-23519: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer (bsc#1206435).
  • CVE-2022-23520: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer (bsc#1206436).
Record
SUSE-SU-2023:3534-1
Updated
2026-11-02
OSVSUSE-SU-2023:3714-1 No score

Security update for rubygem-rails-html-sanitizer

This update for rubygem-rails-html-sanitizer fixes the following issues:

  • CVE-2022-23517: Fixed inefficient regular expression that is susceptible to excessive backtracking when attempting to sanitize certain SVG attributes. (bsc#1206433)
  • CVE-2022-23518: Fixed XSS via data URIs when used in combination with Loofah. (bsc#1206434)
  • CVE-2022-23519: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer. (bsc#1206435)
  • CVE-2022-23520: Fixed XSS vulnerability with certain configurations of Rails::Html::Sanitizer. (bsc#1206436)
Record
SUSE-SU-2023:3714-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
rails-html-sanitizer
RubyGems
 before 1.4.4
1.4.4
ruby-rails-html-sanitizer
Debian:12
 before 1.4.4-1
1.4.4-1
ruby-rails-html-sanitizer
Debian:13
 before 1.4.4-1
1.4.4-1
ruby-rails-html-sanitizer
Debian:14
 before 1.4.4-1
1.4.4-1
ruby-rails-html-sanitizer
Debian:10
From an advisory covering 4 CVEs
 before 1.0.4-1+deb10u2, plus listed versions
1.0.4-11.0.4-1+deb10u1
1.0.4-1+deb10u2
ruby-rails-html-sanitizer
Debian:11
From an advisory covering 5 CVEs
 before 1.3.0-1+deb11u1, plus listed versions
1.3.0-1
1.3.0-1+deb11u1
rails-html-sanitizer
RubyGems
 before 1.4.4, plus listed versions
1.0.01.0.11.0.21.0.31.0.4
Show 7 moreShow less
1.1.01.2.01.3.01.4.01.4.11.4.21.4.3
1.4.4
ansible-collection-redhat-satellite
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.9.0-2.el8sat
0:3.9.0-2.el8sat
ansible-collection-redhat-satellite_operations
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8sat
0:1.3.0-2.el8sat
ansible-lint
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.8-4.el8pc
0:5.0.8-4.el8pc
Show 290 moreShow less
Affected packages
PackageAffectedFixed
ansible-runner
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-3.el8sat
0:2.2.1-3.el8sat
ansiblerole-foreman_scap_client
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-2.el8sat
0:0.2.0-2.el8sat
ansiblerole-insights-client
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.1-2.el8sat
0:1.7.1-2.el8sat
cjson
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
createrepo_c
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-libs
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
createrepo_c-libs-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.20.1-1.el8pc
0:0.20.1-1.el8pc
dynflow-utils
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.6.3-1.el8sat
0:1.6.3-1.el8sat
foreman
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-bootloaders-redhat
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:202102220000-1.el8sat
0:202102220000-1.el8sat
foreman-bootloaders-redhat-tftpboot
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:202102220000-1.el8sat
0:202102220000-1.el8sat
foreman-debug
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-discovery-image
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:4.1.0-10.el8sat
1:4.1.0-10.el8sat
foreman-discovery-image-service
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-4.1.el8sat
0:1.0.0-4.1.el8sat
foreman-discovery-image-service-tui
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-4.1.el8sat
0:1.0.0-4.1.el8sat
foreman-installer
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.5.2.1-1.el8sat
1:3.5.2.1-1.el8sat
foreman-installer-katello
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.5.2.1-1.el8sat
1:3.5.2.1-1.el8sat
foreman-proxy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
foreman-proxy-content
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
foreman-proxy-journald
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
katello
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
katello-certs-tools
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-1.el8sat
0:2.9.0-1.el8sat
katello-client-bootstrap
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.9-1.el8sat
0:1.7.9-1.el8sat
katello-common
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
katello-debug
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.0-1.el8sat
0:4.7.0-1.el8sat
libcomps
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libcomps-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libcomps-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.18-4.el8pc
0:0.1.18-4.el8pc
libdb-cxx
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-cxx-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-java-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-sql-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-sql-devel-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-tcl-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libdb-utils-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.3.28-42.el8_4
0:5.3.28-42.el8_4
libsodium
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsodium-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsodium-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.17-3.el8sat
0:1.0.17-3.el8sat
libsolv
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-demo-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libsolv-tools-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.22-4.el8pc
0:0.7.22-4.el8pc
libwebsockets
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
libwebsockets-tests-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.2-2.el8
0:2.4.2-2.el8
mosquitto
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
mosquitto-debuginfo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
mosquitto-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.14-1.el8sat
0:2.0.14-1.el8sat
pulpcore-selinux
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.2-1.el8pc
0:1.3.2-1.el8pc
puppet-agent
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:7.12.1-1.el8sat
0:7.12.1-1.el8sat
puppet-agent-oauth
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.10-1.el8sat
0:0.5.10-1.el8sat
puppet-foreman_scap_client
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.0-1.el8sat
0:0.4.0-1.el8sat
puppetlabs-stdlib
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.2.0-1.el8sat
0:5.2.0-1.el8sat
puppetserver
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:7.9.3-1.el8sat
0:7.9.3-1.el8sat
python-aiodns
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
python-aiofiles
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:22.1.0-1.el8pc
0:22.1.0-1.el8pc
python-aiohttp
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.8.1-3.el8pc
0:3.8.1-3.el8pc
python-aiohttp-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.8.1-3.el8pc
0:3.8.1-3.el8pc
python-aiohttp-xmlrpc
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.5.0-2.el8pc
0:1.5.0-2.el8pc
python-aioredis
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-2.el8pc
0:2.0.1-2.el8pc
python-aiosignal
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.2.0-2.el8pc
0:1.2.0-2.el8pc
python-ansible-builder
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.1-4.el8pc
0:1.0.1-4.el8pc
python-asgiref
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.2-1.el8pc
0:3.5.2-1.el8pc
python-async-lru
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.3-1.el8pc
0:1.0.3-1.el8pc
python-async-timeout
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.0.2-2.el8pc
0:4.0.2-2.el8pc
python-asyncio-throttle
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.2-3.el8pc
0:1.0.2-3.el8pc
python-attrs
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:21.4.0-2.el8pc
0:21.4.0-2.el8pc
python-backoff
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.2-1.el8pc
0:2.1.2-1.el8pc
python-bindep
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.11.0-2.el8pc
0:2.11.0-2.el8pc
python-bleach
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.1-2.el8pc
0:3.3.1-2.el8pc
python-bleach-allowlist
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.3-3.el8pc
0:1.0.3-3.el8pc
python-bracex
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-2.el8pc
0:2.2.1-2.el8pc
python-brotli
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.9-2.el8pc
0:1.0.9-2.el8pc
python-brotli-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.9-2.el8pc
0:1.0.9-2.el8pc
python-cchardet
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.7-4.el8pc
0:2.1.7-4.el8pc
python-cchardet-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.7-4.el8pc
0:2.1.7-4.el8pc
python-certifi
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2020.6.20-3.el8pc
0:2020.6.20-3.el8pc
python-cffi
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.1-1.el8pc
0:1.15.1-1.el8pc
python-cffi-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.1-1.el8pc
0:1.15.1-1.el8pc
python-chardet
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.el8pc
0:5.0.0-1.el8pc
python-charset-normalizer
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.1-1.el8pc
0:2.1.1-1.el8pc
python-click
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:8.1.3-1.el8pc
0:8.1.3-1.el8pc
python-click-shell
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1-3.el8pc
0:2.1-3.el8pc
python-colorama
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.4-3.el8pc
0:0.4.4-3.el8pc
python-commonmark
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.9.1-5.el8pc
0:0.9.1-5.el8pc
python-contextlib2
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:21.6.0-3.el8pc
0:21.6.0-3.el8pc
python-cryptography
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.4.8-1.el8pc
0:3.4.8-1.el8pc
python-cryptography-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.4.8-1.el8pc
0:3.4.8-1.el8pc
python-daemon
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.3.1-1.1.el8sat
0:2.3.1-1.1.el8sat
python-dataclasses
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.8-3.el8pc
0:0.8-3.el8pc
python-dateutil
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.8.2-2.el8pc
0:2.8.2-2.el8pc
python-debian
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.43-2.el8pc
0:0.1.43-2.el8pc
python-defusedxml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.1-3.el8pc
0:0.7.1-3.el8pc
python-deprecated
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.2.13-1.el8pc
0:1.2.13-1.el8pc
python-diff-match-patch
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:20200713-3.el8pc
0:20200713-3.el8pc
python-distro
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.0-1.el8pc
0:1.7.0-1.el8pc
python-django
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.2.18-1.el8pc
0:3.2.18-1.el8pc
python-django-currentuser
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.3-5.el8pc
0:0.5.3-5.el8pc
python-django-filter
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:22.1-2.el8pc
0:22.1-2.el8pc
python-django-guid
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-1.el8pc
0:3.3.0-1.el8pc
python-django-import-export
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-1.el8pc
0:2.8.0-1.el8pc
python-django-lifecycle
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-1.el8pc
0:1.0.0-1.el8pc
python-django-readonly-field
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.1-3.el8pc
0:1.1.1-3.el8pc
python-djangorestframework
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.13.1-2.el8pc
0:3.13.1-2.el8pc
python-djangorestframework-queryfields
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-5.el8pc
0:1.0.0-5.el8pc
python-docutils
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.19-1.1.el8sat
0:0.19-1.1.el8sat
python-drf-access-policy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.2-1.el8pc
0:1.1.2-1.el8pc
python-drf-nested-routers
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.93.4-3.el8pc
0:0.93.4-3.el8pc
python-drf-spectacular
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.23.1-1.el8pc
0:0.23.1-1.el8pc
python-dynaconf
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.1.9-1.el8pc
0:3.1.9-1.el8pc
python-ecdsa
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.14.1-2.el8pc
0:0.14.1-2.el8pc
python-enrich
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.2.6-5.el8pc
0:1.2.6-5.el8pc
python-et-xmlfile
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-2.el8pc
0:1.1.0-2.el8pc
python-flake8
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.9.2-5.el8pc
0:3.9.2-5.el8pc
python-frozenlist
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8pc
0:1.3.0-2.el8pc
python-frozenlist-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8pc
0:1.3.0-2.el8pc
python-future
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.18.2-5.el8pc
0:0.18.2-5.el8pc
python-galaxy-importer
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.5-1.el8pc
0:0.4.5-1.el8pc
python-gitdb
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.0.9-2.el8pc
0:4.0.9-2.el8pc
python-gitpython
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.1.26-3.el8pc
0:3.1.26-3.el8pc
python-gnupg
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.0-1.el8pc
0:0.5.0-1.el8pc
python-gunicorn
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:20.1.0-5.el8pc
0:20.1.0-5.el8pc
python-idna
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3-2.el8pc
0:3.3-2.el8pc
python-idna-ssl
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-5.el8pc
0:1.1.0-5.el8pc
python-importlib-metadata
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.10.1-2.el8pc
0:4.10.1-2.el8pc
python-inflection
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.1-3.el8pc
0:0.5.1-3.el8pc
python-iniparse
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4-35.el8pc
0:0.4-35.el8pc
python-jinja2
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.1.2-1.el8pc
0:3.1.2-1.el8pc
python-jsonschema
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.9.1-1.el8pc
0:4.9.1-1.el8pc
python-lockfile
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.12.2-1.el8sat
0:0.12.2-1.el8sat
python-lxml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.1-2.el8pc
0:4.7.1-2.el8pc
python-lxml-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.7.1-2.el8pc
0:4.7.1-2.el8pc
python-markdown
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.6-3.el8pc
0:3.3.6-3.el8pc
python-markuppy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.14-3.el8pc
0:1.14-3.el8pc
python-markupsafe
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-3.el8pc
0:2.0.1-3.el8pc
python-markupsafe-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-3.el8pc
0:2.0.1-3.el8pc
python-mccabe
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.6.1-3.el8pc
0:0.6.1-3.el8pc
python-multidict
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:6.0.2-2.el8pc
0:6.0.2-2.el8pc
python-multidict-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:6.0.2-2.el8pc
0:6.0.2-2.el8pc
python-naya
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.1-3.el8pc
0:1.1.1-3.el8pc
python-odfpy
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.4.1-6.el8pc
0:1.4.1-6.el8pc
python-openpyxl
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.9-2.el8pc
0:3.0.9-2.el8pc
python-packaging
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:21.3-1.1.el8sat
0:21.3-1.1.el8sat
python-parsley
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3-2.el8pc
0:1.3-2.el8pc
python-pbr
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.8.0-4.el8pc
0:5.8.0-4.el8pc
python-pexpect
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-2.el8sat
0:4.8.0-2.el8sat
python-productmd
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.33-3.el8pc
0:1.33-3.el8pc
python-protobuf
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.21.6-1.el8pc
0:4.21.6-1.el8pc
python-psycopg2
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.9.3-2.el8pc
0:2.9.3-2.el8pc
python-psycopg2-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.9.3-2.el8pc
0:2.9.3-2.el8pc
python-ptyprocess
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.7.0-1.el8sat
0:0.7.0-1.el8sat
python-pulp-ansible
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:0.15.0-1.el8pc
1:0.15.0-1.el8pc
python-pulp-certguard
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.5.5-1.el8pc
0:1.5.5-1.el8pc
python-pulp-cli
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.14.0-4.el8pc
0:0.14.0-4.el8pc
python-pulp-container
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.14.3-1.el8pc
0:2.14.3-1.el8pc
python-pulp-deb
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.20.0-1.el8pc
0:2.20.0-1.el8pc
python-pulp-file
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.11.1-1.el8pc
0:1.11.1-1.el8pc
python-pulp-rpm
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.18.11-1.el8pc
0:3.18.11-1.el8pc
python-pulpcore
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.21.6-1.el8pc
0:3.21.6-1.el8pc
python-pyOpenSSL
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:19.1.0-3.el8pc
0:19.1.0-3.el8pc
python-pycairo
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.20.1-3.el8pc
0:1.20.1-3.el8pc
python-pycairo-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.20.1-3.el8pc
0:1.20.1-3.el8pc
python-pycares
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.1.2-2.el8pc
0:4.1.2-2.el8pc
python-pycares-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.1.2-2.el8pc
0:4.1.2-2.el8pc
python-pycodestyle
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.7.0-5.el8pc
0:2.7.0-5.el8pc
python-pycparser
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.21-2.el8pc
0:2.21-2.el8pc
python-pycryptodomex
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.14.1-2.el8pc
0:3.14.1-2.el8pc
python-pycryptodomex-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.14.1-2.el8pc
0:3.14.1-2.el8pc
python-pyflakes
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.3.1-5.el8pc
0:2.3.1-5.el8pc
python-pygments
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.11.2-2.el8pc
0:2.11.2-2.el8pc
python-pygobject
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.40.1-4.el8pc
1:3.40.1-4.el8pc
python-pygobject-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 1:3.40.1-4.el8pc
1:3.40.1-4.el8pc
python-pygtrie
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-1.el8pc
0:2.5.0-1.el8pc
python-pyjwkest
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.4.2-6.el8pc
0:1.4.2-6.el8pc
python-pyjwt
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-2.el8pc
0:2.5.0-2.el8pc
python-pyparsing
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.4.7-3.el8pc
0:2.4.7-3.el8pc
python-pyrsistent
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.18.1-2.el8pc
0:0.18.1-2.el8pc
python-pyrsistent-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.18.1-2.el8pc
0:0.18.1-2.el8pc
python-pytz
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2022.2.1-1.el8pc
0:2022.2.1-1.el8pc
python-pyyaml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.4.1-4.el8pc
0:5.4.1-4.el8pc
python-qpid
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.37.0-1.el8
0:1.37.0-1.el8
python-redis
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.3.4-1.el8pc
0:4.3.4-1.el8pc
python-requests
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.28.1-1.el8pc
0:2.28.1-1.el8pc
python-requirements-parser
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-3.el8pc
0:0.2.0-3.el8pc
python-rhsm
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.19.2-3.el8pc
0:1.19.2-3.el8pc
python-rhsm-debugsource
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.19.2-3.el8pc
0:1.19.2-3.el8pc
python-rich
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:10.12.0-3.el8pc
0:10.12.0-3.el8pc
python-ruamel-yaml
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.17.20-2.el8pc
0:0.17.20-2.el8pc
python-ruamel-yaml-clib
Red Hat:satellite_capsule:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.6-2.el8pc
0:0.2.6-2.el8pc
rubygem-clamp
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.2-7.el8sat
0:1.1.2-7.el8sat
rubygem-foreman_maintain
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 1:1.2.8-1.el8sat
1:1.2.8-1.el8sat
rubygem-highline
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.3-2.el8sat
0:2.0.3-2.el8sat
satellite-clone
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-1.el8sat
0:3.3.0-1.el8sat
satellite-maintain
Red Hat:satellite_maintenance:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.1-1.el8sat
0:0.0.1-1.el8sat
foreman
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
foreman-cli
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1.14-1.el8sat
0:3.5.1.14-1.el8sat
python-pulp_manifest
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
python39-pulp_manifest
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.0.0-3.el8pc
0:3.0.0-3.el8pc
rubygem-amazing_print
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.4.0-1.el8sat
0:1.4.0-1.el8sat
rubygem-apipie-bindings
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.6.0-1.el8sat
0:0.6.0-1.el8sat
rubygem-clamp
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.2-7.el8sat
0:1.1.2-7.el8sat
rubygem-domain_name
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.5.20190701-1.el8sat
0:0.5.20190701-1.el8sat
rubygem-fast_gettext
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.8.0-1.el8sat
0:1.8.0-1.el8sat
rubygem-ffi
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-ffi-debuginfo
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-ffi-debugsource
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.5-1.el8sat
0:1.15.5-1.el8sat
rubygem-gssapi
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.1-1.el8sat
0:1.3.1-1.el8sat
rubygem-hammer_cli
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
rubygem-hammer_cli_foreman
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.5.1-1.el8sat
0:3.5.1-1.el8sat
rubygem-hammer_cli_foreman_admin
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-hammer_cli_foreman_ansible
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.0-2.el8sat
0:0.4.0-2.el8sat
rubygem-hammer_cli_foreman_azure_rm
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.2-1.el8sat
0:0.2.2-1.el8sat
rubygem-hammer_cli_foreman_bootdisk
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.3.0-3.el8sat
0:0.3.0-3.el8sat
rubygem-hammer_cli_foreman_discovery
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-hammer_cli_foreman_google
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-1.el8sat
0:1.0.0-1.el8sat
rubygem-hammer_cli_foreman_openscap
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.13-2.el8sat
0:0.1.13-2.el8sat
rubygem-hammer_cli_foreman_remote_execution
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.2-1.el8sat
0:0.2.2-1.el8sat
rubygem-hammer_cli_foreman_tasks
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.18-1.el8sat
0:0.0.18-1.el8sat
rubygem-hammer_cli_foreman_templates
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-3.el8sat
0:0.2.0-3.el8sat
rubygem-hammer_cli_foreman_virt_who_configure
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.9-2.el8sat
0:0.0.9-2.el8sat
rubygem-hammer_cli_foreman_webhooks
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.4-1.el8sat
0:0.0.4-1.el8sat
rubygem-hammer_cli_katello
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.3-1.el8sat
0:1.7.3-1.el8sat
rubygem-hashie
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.el8sat
0:5.0.0-1.el8sat
rubygem-highline
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.3-2.el8sat
0:2.0.3-2.el8sat
rubygem-http-accept
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.0-1.el8sat
0:1.7.0-1.el8sat
rubygem-http-cookie
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.5-1.el8sat
0:1.0.5-1.el8sat
rubygem-jwt
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-1.el8sat
0:2.5.0-1.el8sat
rubygem-little-plugger
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.4-3.el8sat
0:1.1.4-3.el8sat
rubygem-locale
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.3-1.el8sat
0:2.1.3-1.el8sat
rubygem-logging
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.3.1-1.el8sat
0:2.3.1-1.el8sat
rubygem-mime-types
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.4.1-1.el8sat
0:3.4.1-1.el8sat
rubygem-mime-types-data
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.2022.0105-1.el8sat
0:3.2022.0105-1.el8sat
rubygem-multi_json
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.15.0-1.el8sat
0:1.15.0-1.el8sat
rubygem-netrc
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.11.0-6.el8sat
0:0.11.0-6.el8sat
rubygem-oauth
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.0-1.el8sat
0:1.1.0-1.el8sat
rubygem-oauth-tty
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.0.5-1.el8sat
0:1.0.5-1.el8sat
rubygem-powerbar
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-3.el8sat
0:2.0.1-3.el8sat
rubygem-rest-client
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.1.0-1.el8sat
0:2.1.0-1.el8sat
rubygem-snaky_hash
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-1.el8sat
0:2.0.1-1.el8sat
rubygem-unf
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.1.4-1.el8sat
0:0.1.4-1.el8sat
rubygem-unf_ext
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.8.2-1.el8sat
0:0.0.8.2-1.el8sat
rubygem-unf_ext-debuginfo
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.8.2-1.el8sat
0:0.0.8.2-1.el8sat
rubygem-unf_ext-debugsource
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.0.8.2-1.el8sat
0:0.0.8.2-1.el8sat
rubygem-unicode
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.4.4-4.1.el8sat
0:0.4.4.4-4.1.el8sat
rubygem-unicode-debuginfo
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.4.4-4.1.el8sat
0:0.4.4.4-4.1.el8sat
rubygem-unicode-debugsource
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.4.4.4-4.1.el8sat
0:0.4.4.4-4.1.el8sat
rubygem-unicode-display_width
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.8.0-1.el8sat
0:1.8.0-1.el8sat
rubygem-version_gem
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.1.1-1.el8sat
0:1.1.1-1.el8sat
satellite
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:6.13.0-6.el8sat
0:6.13.0-6.el8sat
satellite-cli
Red Hat:satellite_utils:6.13::el8
From an advisory covering 26 CVEs
 before 0:6.13.0-6.el8sat
0:6.13.0-6.el8sat
ansible-collection-redhat-satellite
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:3.9.0-2.el8sat
0:3.9.0-2.el8sat
ansible-collection-redhat-satellite_operations
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-2.el8sat
0:1.3.0-2.el8sat
ansible-lint
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:5.0.8-4.el8pc
0:5.0.8-4.el8pc
ansible-runner
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-3.el8sat
0:2.2.1-3.el8sat
ansiblerole-foreman_scap_client
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:0.2.0-2.el8sat
0:0.2.0-2.el8sat
ansiblerole-insights-client
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.1-2.el8sat
0:1.7.1-2.el8sat
candlepin
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.2.13-1.el8sat
0:4.2.13-1.el8sat
candlepin-selinux
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:4.2.13-1.el8sat
0:4.2.13-1.el8sat
cjson
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debuginfo
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
cjson-debugsource
Red Hat:satellite:6.13::el8
From an advisory covering 26 CVEs
 before 0:1.7.14-5.el8sat
0:1.7.14-5.el8sat
rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud Crowbar 8
From an advisory covering 4 CVEs
 before 1.0.3-8.14.1
1.0.3-8.14.1
rubygem-rails-html-sanitizer
SUSE:OpenStack Cloud Crowbar 9
From an advisory covering 4 CVEs
 before 1.0.3-8.14.1
1.0.3-8.14.1
rubygem-rails-html-sanitizer
SUSE:Linux Enterprise High Availability Extension 15 SP1
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
rubygem-rails-html-sanitizer
SUSE:Linux Enterprise High Availability Extension 15 SP2
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
rubygem-rails-html-sanitizer
SUSE:Linux Enterprise High Availability Extension 15 SP3
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
rubygem-rails-html-sanitizer
SUSE:Linux Enterprise High Availability Extension 15 SP4
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
rubygem-rails-html-sanitizer
SUSE:Linux Enterprise High Availability Extension 15 SP5
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
rubygem-rails-html-sanitizer
openSUSE:Leap 15.4
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
rubygem-rails-html-sanitizer
openSUSE:Leap 15.5
From an advisory covering 4 CVEs
 before 1.0.4-150000.4.6.1
1.0.4-150000.4.6.1
ruby-rails-html-sanitizer
Ubuntu:16.04:LTS
 All versions, plus listed versions
1.0.2-11.0.3-11.0.3-2
 None known
ruby-rails-html-sanitizer
Ubuntu:18.04:LTS
 All versions, plus listed versions
1.0.3-21.0.4-1
 None known
ruby-rails-html-sanitizer
Ubuntu:20.04:LTS
 All versions, plus listed versions
1.0.4-11.3.0-1
 None known
ruby-rails-html-sanitizer
Ubuntu:22.04:LTS
 All versions, plus listed versions
1.3.0-21.4.2-11.4.2-2
 None known
ruby-rails-html-sanitizer
Ubuntu:24.04:LTS
 All versions, plus listed versions
1.4.4-1
 None known
ruby-rails-html-sanitizer
Ubuntu:25.10
 All versions, plus listed versions
1.4.4-11.6.2-1
 None known
ruby-rails-html-sanitizer
Ubuntu:26.10
 All versions, plus listed versions
1.6.2-11.7.0-21.7.1-1
 None known
ruby-rails-html-sanitizer
Ubuntu:26.04:LTS
 All versions, plus listed versions
1.6.2-1
 None known
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
From an advisory covering 4 CVEs
 before 1.5.0-1.1
1.5.0-1.1
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 1.6.0-1.5
1.6.0-1.5
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 1.6.0-1.7
1.6.0-1.7
rubygem-rails-html-sanitizer
openSUSE:Tumbleweed
From an advisory covering 9 CVEs
 before 1.6.0-1.9
1.6.0-1.9

History

History
RecordedChangedSources
affected, factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-23517 is a high vulnerability (CVSS 7.5) in Rails Rails-html-sanitizer, published December 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.58%, the 75th percentile. Fixed in rails-html-sanitizer 1.4.4.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 189 package rows and 196 references. The JSON record has them. Also not on the record: 957 package claims. ID and package lookups still check them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open