CVE-2022-32224
Active Record RCE bug with Serialized Columns
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
9.8
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
- Record
CVE-2022-32224- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
CVE List
9.8
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
- Record
CVE-2022-32224- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
EUVDEUVD-2022-6218
9.8
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
- Record
EUVD-2022-6218- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-3hhc-qp5v-9p2j
9.8
Active Record RCE bug with Serialized Columns
When serialized columns that use YAML (the default) are deserialized, Rails uses YAML.unsafe_load to convert the YAML data in to Ruby objects. If an attacker can manipulate data in the database (via means like SQL injection), then it may be possible for the attacker to escalate to an RCE.
There are no feasible workarounds for this issue, but other coders (such as JSON) are not impacted.
- Record
GHSA-3hhc-qp5v-9p2j- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSV
9.8
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
- Record
CVE-2022-32224- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
OSVGHSA-3hhc-qp5v-9p2j
9.8
Active Record RCE bug with Serialized Columns
When serialized columns that use YAML (the default) are deserialized, Rails uses YAML.unsafe_load to convert the YAML data in to Ruby objects. If an attacker can manipulate data in the database (via means like SQL injection), then it may be possible for the attacker to escalate to an RCE.
There are no feasible workarounds for this issue, but other coders (such as JSON) are not impacted.
- Record
GHSA-3hhc-qp5v-9p2j- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-502
- Updated
- 2026-11-02
Show 11 moreShow less
OSVRHSA-2023:0261
8.5
Red Hat Security Advisory: Satellite 6.12.1 Async Security Update
- Record
RHSA-2023:0261- CVSS 3.1
- 8.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:1151
8.5
Red Hat Security Advisory: Satellite 6.11.5 Async Security Update
- Record
RHSA-2023:1151- CVSS 3.1
- 8.5 High
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2023:2097
9.8
Red Hat Security Advisory: Satellite 6.13 Release
- Record
RHSA-2023:2097- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2022-32224
9.8
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
- Record
UBUNTU-CVE-2022-32224- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2022-32224 No score
A possible escalation to RCE vulnerability exists when using YAML serialized columns in Active Record < 7.0.3.1, <6.1.6.1, <6.0.5.1 and <5.2.8.1 which could allow an attacker, that can manipulate data in the database (via means like SQL injection), the ability to escalate to an RCE.
- Record
DEBIAN-CVE-2022-32224- Updated
- 2026-11-03
OSVopenSUSE-SU-2023:0009-1 No score
Security update for rubygem-activerecord-5.2
This update for rubygem-activerecord-5.2 fixes the following issues:
- CVE-2022-32224: Fixed possible remote code execution when using YAML serialized columns in Active Record (boo#1201465).
- Record
openSUSE-SU-2023:0009-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12244-1 No score
ruby3.1-rubygem-activerecord-7.0-7.0.3.1-1.1 on GA media
These are all security issues fixed in the ruby3.1-rubygem-activerecord-7.0-7.0.3.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12244-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:12879-1 No score
ruby3.2-rubygem-activerecord-7.0-7.0.4.3-1.1 on GA media
These are all security issues fixed in the ruby3.2-rubygem-activerecord-7.0-7.0.4.3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:12879-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14069-1 No score
ruby3.3-rubygem-activerecord-7.0-7.0.8.4-1.1 on GA media
These are all security issues fixed in the ruby3.3-rubygem-activerecord-7.0-7.0.8.4-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14069-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15112-1 No score
ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 on GA media
These are all security issues fixed in the ruby3.4-rubygem-activerecord-7.0-7.0.8.6-1.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15112-1- Updated
- 2026-11-02
OSVRLSA-2023:2097 No score
Important: Satellite 6.13 Release
Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized tool.
Security Fix(es):
- CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws
- CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack
- CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
- CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting
- CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service
- CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service
- CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting
- CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
- CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations
- CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers
- CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution
- CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record
- CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults
- CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs
- CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions
- CVE-2022-42003 CVE-2022-42004 candlepin: various flaws
- CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE
- CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service
- CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers
- CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Additional Changes:
The items above are not a complete list of changes. This update also fixes several bugs and adds various enhancements. Documentation for these changes is available from the Release Notes document.
- Record
RLSA-2023:2097- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
activerecordRubyGems |
7.0.0 to 7.0.3 | 7.0.3.1 |
activerecordRubyGems |
6.1.0 to 6.1.6 | 6.1.6.1 |
activerecordRubyGems |
6.0.0 to 6.0.5 | 6.0.5.1 |
activerecordRubyGems |
through 5.2.8 | 5.2.8.1 |
railsDebian:12 |
before 2:6.1.6.1+dfsg-1 | 2:6.1.6.1+dfsg-1 |
railsDebian:13 |
before 2:6.1.6.1+dfsg-1 | 2:6.1.6.1+dfsg-1 |
railsDebian:14 |
before 2:6.1.6.1+dfsg-1 | 2:6.1.6.1+dfsg-1 |
activerecordRubyGems |
7.0.0 up to 7.0.3.1, plus listed versions 7.0.17.0.27.0.2.17.0.2.27.0.2.37.0.2.47.0.3 |
7.0.3.1 |
activerecordRubyGems |
6.1.0 up to 6.1.6.1, plus listed versions 6.1.16.1.26.1.2.16.1.36.1.3.1 Show 12 moreShow less6.1.3.26.1.46.1.4.16.1.4.26.1.4.36.1.4.46.1.4.56.1.4.66.1.4.76.1.56.1.5.16.1.6 |
6.1.6.1 |
activerecordRubyGems |
6.0.0 up to 6.0.5.1, plus listed versions 6.0.16.0.1.rc16.0.26.0.2.16.0.2.2 Show 21 moreShow less6.0.2.rc16.0.2.rc26.0.36.0.3.16.0.3.26.0.3.36.0.3.46.0.3.56.0.3.66.0.3.76.0.3.rc16.0.46.0.4.16.0.4.26.0.4.36.0.4.46.0.4.56.0.4.66.0.4.76.0.4.86.0.5 |
6.0.5.1 |
Show 290 moreShow less
| Package | Affected | Fixed |
|---|---|---|
activerecordRubyGems |
before 5.2.8.1, plus listed versions 1.0.01.1.01.10.01.10.11.11.0 Show 45 moreShow less1.11.11.12.11.12.21.13.01.13.11.13.21.14.01.14.11.14.21.14.31.14.41.15.01.15.11.15.21.15.31.15.41.15.51.15.61.2.01.3.01.4.01.5.01.5.11.6.01.7.01.8.01.9.01.9.12.0.02.0.12.0.22.0.42.0.52.1.02.1.12.1.22.2.22.2.32.3.102.3.112.3.122.3.142.3.152.3.162.3.17 |
5.2.8.1 |
rubygem-activerecordRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
foremanRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-debugRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
python-pulp-containerRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:2.10.10-1.el8pc | 0:2.10.10-1.el8pc |
python-pulp-rpmRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.9-1.el8pc | 0:3.18.9-1.el8pc |
python-pulpcoreRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.11-1.el8pc | 0:3.18.11-1.el8pc |
python39-pulp-containerRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:2.10.10-1.el8pc | 0:2.10.10-1.el8pc |
python39-pulp-rpmRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.9-1.el8pc | 0:3.18.9-1.el8pc |
python39-pulpcoreRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.11-1.el8pc | 0:3.18.11-1.el8pc |
rubygem-smart_proxy_container_gatewayRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:1.0.7-1.el8sat | 0:1.0.7-1.el8sat |
satelliteRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
satellite-capsuleRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
satellite-commonRed Hat:satellite_capsule:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
satellite-cloneRed Hat:satellite_maintenance:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.2.0-2.el8sat | 0:3.2.0-2.el8sat |
foremanRed Hat:satellite_utils:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-cliRed Hat:satellite_utils:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
satelliteRed Hat:satellite_utils:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
satellite-cliRed Hat:satellite_utils:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
candlepinRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:4.1.18-1.el8sat | 0:4.1.18-1.el8sat |
candlepin-selinuxRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:4.1.18-1.el8sat | 0:4.1.18-1.el8sat |
foremanRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-cliRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-debugRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-ec2Red Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-gceRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-journaldRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-libvirtRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-openstackRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-ovirtRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-postgresqlRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-serviceRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-telemetryRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
foreman-vmwareRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.3.0.18-1.el8sat | 0:3.3.0.18-1.el8sat |
python-pulp-containerRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:2.10.10-1.el8pc | 0:2.10.10-1.el8pc |
python-pulp-rpmRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.9-1.el8pc | 0:3.18.9-1.el8pc |
python-pulpcoreRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.11-1.el8pc | 0:3.18.11-1.el8pc |
python39-pulp-containerRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:2.10.10-1.el8pc | 0:2.10.10-1.el8pc |
python39-pulp-rpmRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.9-1.el8pc | 0:3.18.9-1.el8pc |
python39-pulpcoreRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.18.11-1.el8pc | 0:3.18.11-1.el8pc |
rubygem-actioncableRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionmailboxRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionmailerRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionpackRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actiontextRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionviewRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activejobRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activemodelRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activestorageRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activesupportRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-1.el8sat | 0:6.0.6-1.el8sat |
rubygem-foreman_rh_cloudRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.44-1.el8sat | 0:6.0.44-1.el8sat |
rubygem-foreman_webhooksRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:3.0.5-1.1.el8sat | 0:3.0.5-1.1.el8sat |
rubygem-katelloRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:4.5.0.22-1.el8sat | 0:4.5.0.22-1.el8sat |
rubygem-railsRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-railtiesRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-smart_proxy_container_gatewayRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:1.0.7-1.el8sat | 0:1.0.7-1.el8sat |
satelliteRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
satellite-cliRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
satellite-commonRed Hat:satellite:6.12::el8 From an advisory covering 3 CVEs |
before 0:6.12.1-1.el8sat | 0:6.12.1-1.el8sat |
tfm-rubygem-activerecordRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
rubygem-activerecordRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
foremanRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-debugRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
rubygem-foreman_maintainRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 1:1.0.19-1.el7sat | 1:1.0.19-1.el7sat |
satelliteRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
satellite-capsuleRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
satellite-commonRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
tfm-pulpcore-python-nayaRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el7pc | 0:1.1.1-1.1.el7pc |
tfm-pulpcore-python-pulp-containerRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el7pc | 0:2.9.9-1.el7pc |
tfm-pulpcore-python-pulpcoreRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el7pc | 0:3.16.15-1.el7pc |
tfm-pulpcore-python3-nayaRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el7pc | 0:1.1.1-1.1.el7pc |
tfm-pulpcore-python3-pulp-containerRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el7pc | 0:2.9.9-1.el7pc |
tfm-pulpcore-python3-pulpcoreRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el7pc | 0:3.16.15-1.el7pc |
tfm-rubygem-smart_proxy_container_gatewayRed Hat:satellite_capsule:6.11::el7 From an advisory covering 2 CVEs |
before 0:1.0.7-1.el7sat | 0:1.0.7-1.el7sat |
rubygem-foreman_maintainRed Hat:satellite_maintenance:6.11::el7 From an advisory covering 2 CVEs |
before 1:1.0.19-1.el7sat | 1:1.0.19-1.el7sat |
satellite-cloneRed Hat:satellite_maintenance:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1-2.el7sat | 0:3.1.1-2.el7sat |
foremanRed Hat:satellite_utils:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-cliRed Hat:satellite_utils:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
satelliteRed Hat:satellite_utils:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
satellite-cliRed Hat:satellite_utils:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
candlepinRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:4.1.19-1.el7sat | 0:4.1.19-1.el7sat |
candlepin-selinuxRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:4.1.19-1.el7sat | 0:4.1.19-1.el7sat |
foremanRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-cliRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-debugRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-ec2Red Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-gceRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-journaldRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-libvirtRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-openstackRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-ovirtRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-postgresqlRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-serviceRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-telemetryRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
foreman-vmwareRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el7sat | 0:3.1.1.26-1.el7sat |
rubygem-foreman_maintainRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 1:1.0.19-1.el7sat | 1:1.0.19-1.el7sat |
satelliteRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
satellite-cliRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
satellite-commonRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el7sat | 0:6.11.5-1.el7sat |
tfm-pulpcore-python-nayaRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el7pc | 0:1.1.1-1.1.el7pc |
tfm-pulpcore-python-pulp-containerRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el7pc | 0:2.9.9-1.el7pc |
tfm-pulpcore-python-pulpcoreRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el7pc | 0:3.16.15-1.el7pc |
tfm-pulpcore-python3-nayaRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el7pc | 0:1.1.1-1.1.el7pc |
tfm-pulpcore-python3-pulp-containerRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el7pc | 0:2.9.9-1.el7pc |
tfm-pulpcore-python3-pulpcoreRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el7pc | 0:3.16.15-1.el7pc |
tfm-rubygem-actioncableRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-actionmailboxRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-actionmailerRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-actionpackRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-actiontextRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-actionviewRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-activejobRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-activemodelRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-activestorageRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-activesupportRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-1.el7sat | 0:6.0.6-1.el7sat |
tfm-rubygem-foreman_rh_cloudRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:5.0.44-1.el7sat | 0:5.0.44-1.el7sat |
tfm-rubygem-foreman_theme_satelliteRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:9.0.0.12-1.el7sat | 0:9.0.0.12-1.el7sat |
tfm-rubygem-katelloRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:4.3.0.52-1.el7sat | 0:4.3.0.52-1.el7sat |
tfm-rubygem-railsRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-railtiesRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el7sat | 0:6.0.6-2.el7sat |
tfm-rubygem-smart_proxy_container_gatewayRed Hat:satellite:6.11::el7 From an advisory covering 2 CVEs |
before 0:1.0.7-1.el7sat | 0:1.0.7-1.el7sat |
foremanRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-debugRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
python-nayaRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el8pc | 0:1.1.1-1.1.el8pc |
python-pulp-containerRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el8pc | 0:2.9.9-1.el8pc |
python-pulpcoreRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el8pc | 0:3.16.15-1.el8pc |
python38-nayaRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el8pc | 0:1.1.1-1.1.el8pc |
python38-pulp-containerRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el8pc | 0:2.9.9-1.el8pc |
python38-pulpcoreRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el8pc | 0:3.16.15-1.el8pc |
rubygem-foreman_maintainRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 1:1.0.19-1.el8sat | 1:1.0.19-1.el8sat |
rubygem-smart_proxy_container_gatewayRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.7-1.el8sat | 0:1.0.7-1.el8sat |
satelliteRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
satellite-capsuleRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
satellite-commonRed Hat:satellite_capsule:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
rubygem-foreman_maintainRed Hat:satellite_maintenance:6.11::el8 From an advisory covering 2 CVEs |
before 1:1.0.19-1.el8sat | 1:1.0.19-1.el8sat |
satellite-cloneRed Hat:satellite_maintenance:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1-2.el8sat | 0:3.1.1-2.el8sat |
foremanRed Hat:satellite_utils:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-cliRed Hat:satellite_utils:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
satelliteRed Hat:satellite_utils:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
satellite-cliRed Hat:satellite_utils:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
candlepinRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:4.1.19-1.el8sat | 0:4.1.19-1.el8sat |
candlepin-selinuxRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:4.1.19-1.el8sat | 0:4.1.19-1.el8sat |
foremanRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-cliRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-debugRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-dynflow-sidekiqRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-ec2Red Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-gceRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-journaldRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-libvirtRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-openstackRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-ovirtRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-postgresqlRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-serviceRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-telemetryRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
foreman-vmwareRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.1.1.26-1.el8sat | 0:3.1.1.26-1.el8sat |
python-nayaRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el8pc | 0:1.1.1-1.1.el8pc |
python-pulp-containerRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el8pc | 0:2.9.9-1.el8pc |
python-pulpcoreRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el8pc | 0:3.16.15-1.el8pc |
python38-nayaRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:1.1.1-1.1.el8pc | 0:1.1.1-1.1.el8pc |
python38-pulp-containerRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:2.9.9-1.el8pc | 0:2.9.9-1.el8pc |
python38-pulpcoreRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:3.16.15-1.el8pc | 0:3.16.15-1.el8pc |
rubygem-actioncableRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionmailboxRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionmailerRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionpackRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actiontextRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-actionviewRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activejobRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activemodelRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activestorageRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-activesupportRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-1.el8sat | 0:6.0.6-1.el8sat |
rubygem-foreman_maintainRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 1:1.0.19-1.el8sat | 1:1.0.19-1.el8sat |
rubygem-foreman_rh_cloudRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:5.0.44-1.el8sat | 0:5.0.44-1.el8sat |
rubygem-foreman_theme_satelliteRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:9.0.0.12-1.el8sat | 0:9.0.0.12-1.el8sat |
rubygem-katelloRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:4.3.0.52-1.el8sat | 0:4.3.0.52-1.el8sat |
rubygem-railsRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-railtiesRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.0.6-2.el8sat | 0:6.0.6-2.el8sat |
rubygem-smart_proxy_container_gatewayRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:1.0.7-1.el8sat | 0:1.0.7-1.el8sat |
satelliteRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
satellite-cliRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
satellite-commonRed Hat:satellite:6.11::el8 From an advisory covering 2 CVEs |
before 0:6.11.5-1.el8sat | 0:6.11.5-1.el8sat |
ansible-collection-redhat-satelliteRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.9.0-2.el8sat | 0:3.9.0-2.el8sat |
ansible-collection-redhat-satellite_operationsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.3.0-2.el8sat | 0:1.3.0-2.el8sat |
ansible-lintRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.0.8-4.el8pc | 0:5.0.8-4.el8pc |
ansible-runnerRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.2.1-3.el8sat | 0:2.2.1-3.el8sat |
ansiblerole-foreman_scap_clientRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.2.0-2.el8sat | 0:0.2.0-2.el8sat |
ansiblerole-insights-clientRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.7.1-2.el8sat | 0:1.7.1-2.el8sat |
cjsonRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.7.14-5.el8sat | 0:1.7.14-5.el8sat |
cjson-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.7.14-5.el8sat | 0:1.7.14-5.el8sat |
cjson-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.7.14-5.el8sat | 0:1.7.14-5.el8sat |
createrepo_cRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.20.1-1.el8pc | 0:0.20.1-1.el8pc |
createrepo_c-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.20.1-1.el8pc | 0:0.20.1-1.el8pc |
createrepo_c-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.20.1-1.el8pc | 0:0.20.1-1.el8pc |
createrepo_c-libsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.20.1-1.el8pc | 0:0.20.1-1.el8pc |
createrepo_c-libs-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.20.1-1.el8pc | 0:0.20.1-1.el8pc |
dynflow-utilsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.6.3-1.el8sat | 0:1.6.3-1.el8sat |
foremanRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.5.1.14-1.el8sat | 0:3.5.1.14-1.el8sat |
foreman-bootloaders-redhatRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:202102220000-1.el8sat | 0:202102220000-1.el8sat |
foreman-bootloaders-redhat-tftpbootRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:202102220000-1.el8sat | 0:202102220000-1.el8sat |
foreman-debugRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.5.1.14-1.el8sat | 0:3.5.1.14-1.el8sat |
foreman-discovery-imageRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 1:4.1.0-10.el8sat | 1:4.1.0-10.el8sat |
foreman-discovery-image-serviceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-4.1.el8sat | 0:1.0.0-4.1.el8sat |
foreman-discovery-image-service-tuiRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-4.1.el8sat | 0:1.0.0-4.1.el8sat |
foreman-installerRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 1:3.5.2.1-1.el8sat | 1:3.5.2.1-1.el8sat |
foreman-installer-katelloRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 1:3.5.2.1-1.el8sat | 1:3.5.2.1-1.el8sat |
foreman-proxyRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.5.1-1.el8sat | 0:3.5.1-1.el8sat |
foreman-proxy-contentRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:4.7.0-1.el8sat | 0:4.7.0-1.el8sat |
foreman-proxy-journaldRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.5.1-1.el8sat | 0:3.5.1-1.el8sat |
katelloRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:4.7.0-1.el8sat | 0:4.7.0-1.el8sat |
katello-certs-toolsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-1.el8sat | 0:2.9.0-1.el8sat |
katello-client-bootstrapRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.7.9-1.el8sat | 0:1.7.9-1.el8sat |
katello-commonRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:4.7.0-1.el8sat | 0:4.7.0-1.el8sat |
katello-debugRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:4.7.0-1.el8sat | 0:4.7.0-1.el8sat |
libcompsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.1.18-4.el8pc | 0:0.1.18-4.el8pc |
libcomps-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.1.18-4.el8pc | 0:0.1.18-4.el8pc |
libcomps-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.1.18-4.el8pc | 0:0.1.18-4.el8pc |
libdb-cxxRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-cxx-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-java-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-sql-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-sql-devel-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-tcl-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libdb-utils-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.3.28-42.el8_4 | 0:5.3.28-42.el8_4 |
libsodiumRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.17-3.el8sat | 0:1.0.17-3.el8sat |
libsodium-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.17-3.el8sat | 0:1.0.17-3.el8sat |
libsodium-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.17-3.el8sat | 0:1.0.17-3.el8sat |
libsolvRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.7.22-4.el8pc | 0:0.7.22-4.el8pc |
libsolv-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.7.22-4.el8pc | 0:0.7.22-4.el8pc |
libsolv-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.7.22-4.el8pc | 0:0.7.22-4.el8pc |
libsolv-demo-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.7.22-4.el8pc | 0:0.7.22-4.el8pc |
libsolv-tools-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.7.22-4.el8pc | 0:0.7.22-4.el8pc |
libwebsocketsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.4.2-2.el8 | 0:2.4.2-2.el8 |
libwebsockets-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.4.2-2.el8 | 0:2.4.2-2.el8 |
libwebsockets-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.4.2-2.el8 | 0:2.4.2-2.el8 |
libwebsockets-tests-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.4.2-2.el8 | 0:2.4.2-2.el8 |
mosquittoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.0.14-1.el8sat | 0:2.0.14-1.el8sat |
mosquitto-debuginfoRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.0.14-1.el8sat | 0:2.0.14-1.el8sat |
mosquitto-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.0.14-1.el8sat | 0:2.0.14-1.el8sat |
pulpcore-selinuxRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.3.2-1.el8pc | 0:1.3.2-1.el8pc |
puppet-agentRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:7.12.1-1.el8sat | 0:7.12.1-1.el8sat |
puppet-agent-oauthRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.5.10-1.el8sat | 0:0.5.10-1.el8sat |
puppet-foreman_scap_clientRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:0.4.0-1.el8sat | 0:0.4.0-1.el8sat |
puppetlabs-stdlibRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.2.0-1.el8sat | 0:5.2.0-1.el8sat |
puppetserverRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:7.9.3-1.el8sat | 0:7.9.3-1.el8sat |
python-aiodnsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.0.0-3.el8pc | 0:3.0.0-3.el8pc |
python-aiofilesRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:22.1.0-1.el8pc | 0:22.1.0-1.el8pc |
python-aiohttpRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.8.1-3.el8pc | 0:3.8.1-3.el8pc |
python-aiohttp-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.8.1-3.el8pc | 0:3.8.1-3.el8pc |
python-aiohttp-xmlrpcRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.5.0-2.el8pc | 0:1.5.0-2.el8pc |
python-aioredisRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-2.el8pc | 0:2.0.1-2.el8pc |
python-aiosignalRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.2.0-2.el8pc | 0:1.2.0-2.el8pc |
python-ansible-builderRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.1-4.el8pc | 0:1.0.1-4.el8pc |
python-asgirefRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.5.2-1.el8pc | 0:3.5.2-1.el8pc |
python-async-lruRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.3-1.el8pc | 0:1.0.3-1.el8pc |
python-async-timeoutRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:4.0.2-2.el8pc | 0:4.0.2-2.el8pc |
python-asyncio-throttleRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.2-3.el8pc | 0:1.0.2-3.el8pc |
python-attrsRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:21.4.0-2.el8pc | 0:21.4.0-2.el8pc |
python-backoffRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.1.2-1.el8pc | 0:2.1.2-1.el8pc |
python-bindepRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.11.0-2.el8pc | 0:2.11.0-2.el8pc |
python-bleachRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:3.3.1-2.el8pc | 0:3.3.1-2.el8pc |
python-bleach-allowlistRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.3-3.el8pc | 0:1.0.3-3.el8pc |
python-bracexRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.2.1-2.el8pc | 0:2.2.1-2.el8pc |
python-brotliRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.9-2.el8pc | 0:1.0.9-2.el8pc |
python-brotli-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.0.9-2.el8pc | 0:1.0.9-2.el8pc |
python-cchardetRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.1.7-4.el8pc | 0:2.1.7-4.el8pc |
python-cchardet-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.1.7-4.el8pc | 0:2.1.7-4.el8pc |
python-certifiRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2020.6.20-3.el8pc | 0:2020.6.20-3.el8pc |
python-cffiRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.15.1-1.el8pc | 0:1.15.1-1.el8pc |
python-cffi-debugsourceRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:1.15.1-1.el8pc | 0:1.15.1-1.el8pc |
python-chardetRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.el8pc | 0:5.0.0-1.el8pc |
python-charset-normalizerRed Hat:satellite_capsule:6.13::el8 From an advisory covering 26 CVEs |
before 0:2.1.1-1.el8pc | 0:2.1.1-1.el8pc |
railsUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 2:4.1.10-12:4.2.5-12:4.2.5.1-12:4.2.5.2-22:4.2.6-12:4.2.6-1ubuntu0.1~esm12:4.2.6-1ubuntu0.1~esm2 |
None known |
railsUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 2:4.2.9-22:4.2.9-42:4.2.10-0ubuntu42:4.2.10-0ubuntu4+esm12:4.2.10-0ubuntu4+esm2 |
None known |
railsUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 2:5.2.2.1+dfsg-1ubuntu12:5.2.3+dfsg-32:5.2.3+dfsg-3ubuntu0.1~esm1 |
None known |
railsUbuntu:Pro:22.04:LTS |
All versions, plus listed versions 2:6.0.3.7+dfsg-22:6.1.4.1+dfsg-8ubuntu22:6.1.4.1+dfsg-8ubuntu2+esm1 |
None known |
railsUbuntu:24.04:LTS |
All versions, plus listed versions 2:6.1.7.3+dfsg-2build12:6.1.7.3+dfsg-3 |
None known |
railsUbuntu:25.10 |
All versions, plus listed versions 2:6.1.7.3+dfsg-72:7.2.2.1+dfsg-7 |
None known |
railsUbuntu:26.10 |
All versions, plus listed versions 2:7.2.3+dfsg-22:7.2.3.2+dfsg-2 |
None known |
railsUbuntu:26.04:LTS |
All versions, plus listed versions 2:7.2.2.1+dfsg-72:7.2.2.2+dfsg-22:7.2.3+dfsg-2 |
None known |
rubygem-activerecord-5.2SUSE:Package Hub 15 SP4 |
before 5.2.3-bp154.2.3.1 | 5.2.3-bp154.2.3.1 |
rubygem-activerecord-5.2openSUSE:Leap 15.4 |
before 5.2.3-bp154.2.3.1 | 5.2.3-bp154.2.3.1 |
rubygem-activerecord-7.0openSUSE:Tumbleweed |
before 7.0.3.1-1.1 | 7.0.3.1-1.1 |
ruby3.2-rubygem-activerecord-7.0openSUSE:Tumbleweed |
before 7.0.4.3-1.1 | 7.0.4.3-1.1 |
rubygem-activerecord-7.0openSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 7.0.8.4-1.1 | 7.0.8.4-1.1 |
rubygem-activerecord-7.0openSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 7.0.8.6-1.3 | 7.0.8.6-1.3 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | ooooooo-q/cve-2022-32224-rails | 2022-07-17 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-32224 is a critical vulnerability (CVSS 9.8) in Activerecord Project Activerecord, published July 12, 2022. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.60%, the 85th percentile. Fixed in activerecord 7.0.3.1.
References
github.com/advisories/GHSA-3hhc-qp5v-9p2j
groups.google.com/g/rubyonrails-security/c/MmFO3LYQE8U
lists.debian.org/debian-lts-announce/2026/05/msg00022.html
nvd.nist.gov/vuln/detail/CVE-2022-32224
github.com/rails/rails/commit/611990f1a6c137c2d56b1ba06b27e5d2434dcd6a
discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017
Show 194 moreShow less
github.com/rubysec/ruby-advisory-db/blob/master/gems/activerecord/CVE-2022-32224.yml
github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32224.json
security-tracker.debian.org/tracker/CVE-2022-32224
github.com/rails/rails/commits/main/activerecord
access.redhat.com/errata/RHSA-2023:0261
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=2082209
bugzilla.redhat.com/show_bug.cgi?id=2108997
bugzilla.redhat.com/show_bug.cgi?id=2135435
bugzilla.redhat.com/show_bug.cgi?id=2141308
bugzilla.redhat.com/show_bug.cgi?id=2150069
bugzilla.redhat.com/show_bug.cgi?id=2150108
bugzilla.redhat.com/show_bug.cgi?id=2150111
bugzilla.redhat.com/show_bug.cgi?id=2150112
bugzilla.redhat.com/show_bug.cgi?id=2150114
bugzilla.redhat.com/show_bug.cgi?id=2150118
bugzilla.redhat.com/show_bug.cgi?id=2150119
bugzilla.redhat.com/show_bug.cgi?id=2150120
bugzilla.redhat.com/show_bug.cgi?id=2150123
bugzilla.redhat.com/show_bug.cgi?id=2150125
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_0261.json
access.redhat.com/security/cve/CVE-2022-32224
cve.org/CVERecord?id=CVE-2022-32224
access.redhat.com/security/cve/CVE-2022-42003
bugzilla.redhat.com/show_bug.cgi?id=2135244
cve.org/CVERecord?id=CVE-2022-42003
nvd.nist.gov/vuln/detail/CVE-2022-42003
access.redhat.com/security/cve/CVE-2022-42889
cve.org/CVERecord?id=CVE-2022-42889
nvd.nist.gov/vuln/detail/CVE-2022-42889
blogs.apache.org/security/entry/cve-2022-42889
lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om
seclists.org/oss-sec/2022/q4/22
access.redhat.com/errata/RHSA-2023:1151
bugzilla.redhat.com/show_bug.cgi?id=2153877
bugzilla.redhat.com/show_bug.cgi?id=2161929
bugzilla.redhat.com/show_bug.cgi?id=2166747
bugzilla.redhat.com/show_bug.cgi?id=2166748
bugzilla.redhat.com/show_bug.cgi?id=2166749
bugzilla.redhat.com/show_bug.cgi?id=2166750
bugzilla.redhat.com/show_bug.cgi?id=2166756
bugzilla.redhat.com/show_bug.cgi?id=2166757
bugzilla.redhat.com/show_bug.cgi?id=2166759
bugzilla.redhat.com/show_bug.cgi?id=2166760
bugzilla.redhat.com/show_bug.cgi?id=2166761
bugzilla.redhat.com/show_bug.cgi?id=2166762
bugzilla.redhat.com/show_bug.cgi?id=2170874
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1151.json
access.redhat.com/errata/RHSA-2023:2097
bugzilla.redhat.com/show_bug.cgi?id=1225819
bugzilla.redhat.com/show_bug.cgi?id=1266407
bugzilla.redhat.com/show_bug.cgi?id=1630294
bugzilla.redhat.com/show_bug.cgi?id=1638226
bugzilla.redhat.com/show_bug.cgi?id=1650468
bugzilla.redhat.com/show_bug.cgi?id=1761012
bugzilla.redhat.com/show_bug.cgi?id=1786358
bugzilla.redhat.com/show_bug.cgi?id=1787456
bugzilla.redhat.com/show_bug.cgi?id=1813274
bugzilla.redhat.com/show_bug.cgi?id=1826648
bugzilla.redhat.com/show_bug.cgi?id=1837767
bugzilla.redhat.com/show_bug.cgi?id=1841534
bugzilla.redhat.com/show_bug.cgi?id=1845489
bugzilla.redhat.com/show_bug.cgi?id=1880947
bugzilla.redhat.com/show_bug.cgi?id=1888667
bugzilla.redhat.com/show_bug.cgi?id=1895976
bugzilla.redhat.com/show_bug.cgi?id=1920810
bugzilla.redhat.com/show_bug.cgi?id=1931027
bugzilla.redhat.com/show_bug.cgi?id=1931533
bugzilla.redhat.com/show_bug.cgi?id=1950468
bugzilla.redhat.com/show_bug.cgi?id=1952529
bugzilla.redhat.com/show_bug.cgi?id=1956210
bugzilla.redhat.com/show_bug.cgi?id=1956985
bugzilla.redhat.com/show_bug.cgi?id=1963266
bugzilla.redhat.com/show_bug.cgi?id=1964037
bugzilla.redhat.com/show_bug.cgi?id=1965871
bugzilla.redhat.com/show_bug.cgi?id=1978683
bugzilla.redhat.com/show_bug.cgi?id=1978995
bugzilla.redhat.com/show_bug.cgi?id=1990790
bugzilla.redhat.com/show_bug.cgi?id=1990875
bugzilla.redhat.com/show_bug.cgi?id=1995097
bugzilla.redhat.com/show_bug.cgi?id=1995470
bugzilla.redhat.com/show_bug.cgi?id=1997186
bugzilla.redhat.com/show_bug.cgi?id=1997199
bugzilla.redhat.com/show_bug.cgi?id=2026151
bugzilla.redhat.com/show_bug.cgi?id=2029402
bugzilla.redhat.com/show_bug.cgi?id=2032040
bugzilla.redhat.com/show_bug.cgi?id=2043600
bugzilla.redhat.com/show_bug.cgi?id=2050234
bugzilla.redhat.com/show_bug.cgi?id=2052904
bugzilla.redhat.com/show_bug.cgi?id=2056402
bugzilla.redhat.com/show_bug.cgi?id=2057314
bugzilla.redhat.com/show_bug.cgi?id=2060099
bugzilla.redhat.com/show_bug.cgi?id=2062526
bugzilla.redhat.com/show_bug.cgi?id=2063999
security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2097.json
access.redhat.com/security/cve/CVE-2021-46877
cve.org/CVERecord?id=CVE-2021-46877
nvd.nist.gov/vuln/detail/CVE-2021-46877
access.redhat.com/security/cve/CVE-2022-1471
cve.org/CVERecord?id=CVE-2022-1471
nvd.nist.gov/vuln/detail/CVE-2022-1471
github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2
access.redhat.com/security/cve/CVE-2022-22577
cve.org/CVERecord?id=CVE-2022-22577
nvd.nist.gov/vuln/detail/CVE-2022-22577
github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2022-22577.yml
access.redhat.com/security/cve/CVE-2022-23514
cve.org/CVERecord?id=CVE-2022-23514
nvd.nist.gov/vuln/detail/CVE-2022-23514
github.com/rubysec/ruby-advisory-db/tree/master/gems/loofah/CVE-2022-23514.yml
access.redhat.com/security/cve/CVE-2022-23515
cve.org/CVERecord?id=CVE-2022-23515
nvd.nist.gov/vuln/detail/CVE-2022-23515
github.com/advisories/GHSA-228g-948r-83gx
access.redhat.com/security/cve/CVE-2022-23516
cve.org/CVERecord?id=CVE-2022-23516
nvd.nist.gov/vuln/detail/CVE-2022-23516
github.com/rubysec/ruby-advisory-db/blob/master/gems/loofah/CVE-2022-23516.yml
access.redhat.com/security/cve/CVE-2022-23517
cve.org/CVERecord?id=CVE-2022-23517
nvd.nist.gov/vuln/detail/CVE-2022-23517
github.com/rails/rails-html-sanitizer/security/advisories/GHSA-5x79-w82f-gw8w
access.redhat.com/security/cve/CVE-2022-23518
cve.org/CVERecord?id=CVE-2022-23518
nvd.nist.gov/vuln/detail/CVE-2022-23518
github.com/rails/rails-html-sanitizer/issues/135
github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m
access.redhat.com/security/cve/CVE-2022-23519
cve.org/CVERecord?id=CVE-2022-23519
nvd.nist.gov/vuln/detail/CVE-2022-23519
github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h
access.redhat.com/security/cve/CVE-2022-23520
cve.org/CVERecord?id=CVE-2022-23520
nvd.nist.gov/vuln/detail/CVE-2022-23520
github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8
access.redhat.com/security/cve/CVE-2022-25857
cve.org/CVERecord?id=CVE-2022-25857
nvd.nist.gov/vuln/detail/CVE-2022-25857
bitbucket.org/snakeyaml/snakeyaml/issues/525
access.redhat.com/security/cve/CVE-2022-27777
cve.org/CVERecord?id=CVE-2022-27777
nvd.nist.gov/vuln/detail/CVE-2022-27777
github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2022-27777.yml
access.redhat.com/security/cve/CVE-2022-31163
cve.org/CVERecord?id=CVE-2022-31163
nvd.nist.gov/vuln/detail/CVE-2022-31163
github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx
access.redhat.com/security/cve/CVE-2022-33980
cve.org/CVERecord?id=CVE-2022-33980
nvd.nist.gov/vuln/detail/CVE-2022-33980
access.redhat.com/security/cve/CVE-2022-38749
cve.org/CVERecord?id=CVE-2022-38749
nvd.nist.gov/vuln/detail/CVE-2022-38749
access.redhat.com/security/cve/CVE-2022-38750
cve.org/CVERecord?id=CVE-2022-38750
nvd.nist.gov/vuln/detail/CVE-2022-38750
access.redhat.com/security/cve/CVE-2022-38751
cve.org/CVERecord?id=CVE-2022-38751
nvd.nist.gov/vuln/detail/CVE-2022-38751
access.redhat.com/security/cve/CVE-2022-38752
cve.org/CVERecord?id=CVE-2022-38752
nvd.nist.gov/vuln/detail/CVE-2022-38752
access.redhat.com/security/cve/CVE-2022-41323
cve.org/CVERecord?id=CVE-2022-41323
nvd.nist.gov/vuln/detail/CVE-2022-41323
djangoproject.com/weblog/2022/oct/04/security-releases
access.redhat.com/security/cve/CVE-2022-41946
cve.org/CVERecord?id=CVE-2022-41946
nvd.nist.gov/vuln/detail/CVE-2022-41946
access.redhat.com/security/cve/CVE-2022-42004
cve.org/CVERecord?id=CVE-2022-42004
nvd.nist.gov/vuln/detail/CVE-2022-42004
access.redhat.com/security/cve/CVE-2023-23969
cve.org/CVERecord?id=CVE-2023-23969
nvd.nist.gov/vuln/detail/CVE-2023-23969
github.com/django/django/commit/4452642f193533e288a52c02efb5bbc766a68f95
github.com/django/django/commit/8a7b22d4a623bcd95190d2f5a958472fb41e576d
github.com/django/django/commit/8c660fb59239828583f17cdede3b64f208b8752c
github.com/django/django/commit/9d7bd5a56b1ce0576e8e07a8001373576d277942
github.com/django/django/commit/c7e0151fdf33e1b11d488b6f67b94fdf3a30614a
djangoproject.com/weblog/2023/feb/01/security-releases
access.redhat.com/security/cve/CVE-2023-24580
cve.org/CVERecord?id=CVE-2023-24580
nvd.nist.gov/vuln/detail/CVE-2023-24580
djangoproject.com/weblog/2023/feb/14/security-releases
errata.rockylinux.org/RLSA-2023:2097
ubuntu.com/security/CVE-2022-32224
lists.opensuse.org/archives/list/[email protected]/thread/YBZO7SDHDNVRVYLMGIAYZZX4DA5X2OZC
bugzilla.suse.com/1201465
suse.com/security/cve/CVE-2022-32224
suse.com/security/cve/CVE-2022-44566
suse.com/security/cve/CVE-2023-22794
suse.com/security/cve/CVE-2023-38037
lists.opensuse.org/archives/list/[email protected]/thread/HY4OG4XVEU3VJA7BHFONYS4OFAKMFV4J
Left out here: 369 package rows, 312 versions and 215 references. The JSON record has them. Also not on the record: 957 package claims. ID and package lookups still check them.