{"id":"CVE-2016-1000111","aliases":["BELL-CVE-2016-1000111","DEBIAN-CVE-2016-1000111","EUVD-2020-0227","GHSA-3gqj-cmxr-p4x2","MGASA-2016-0340","PYSEC-2020-214","RHSA-2016:1978","RHSA-2018:0273","SUSE-SU-2017:0114-1","UBUNTU-CVE-2016-1000111","USN-3585-1","openSUSE-SU-2024:10162-1"],"status":"published","title":"Forced Browsing in Twisted","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02762,"percentile":0.86372,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-425"],"published":"2016-07-18T00:00:00Z","modified":"2026-10-24T10:30:19Z","fixes":[{"ecosystem":"PyPI","package":"twisted","fixed_in":["16.3.1"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"twisted","fixed_in":["16.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"twisted","fixed_in":["16.4.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"twisted","fixed_in":["16.4.0-1"],"sources":["osv"]},{"ecosystem":"Mageia:5","package":"python-twisted-web","fixed_in":["14.0.1-3.1.mga5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-twisted-web","fixed_in":["0:8.2.0-5.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-twisted-web","fixed_in":["0:8.2.0-5.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-twisted-web","fixed_in":["0:8.2.0-5.el6_8"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-twisted-web","fixed_in":["0:12.1.0-5.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-twisted-web","fixed_in":["0:12.1.0-5.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-twisted-web","fixed_in":["0:12.1.0-5.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman-debug","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman-installer","fixed_in":["1:1.11.0.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman-installer-katello","fixed_in":["0:3.0.0.101-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-capsule","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-debug","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-installer-base","fixed_in":["0:3.0.0.101-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-service","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"libqpid-dispatch","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-admin-client","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-nodes-child","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-nodes-common","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-nodes-parent","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-puppet","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-puppet-admin-extensions","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-puppet-plugins","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-selinux","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-server","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-agent-lib","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-bindings","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-client-lib","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-common","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-oid_validation","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-puppet-common","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-repoauth","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-streamer","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-qpid-proton","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch-debuginfo","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch-router","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch-tools","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-proton","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-proton-c","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-proton-debuginfo","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"rubygem-smart_proxy_openscap","fixed_in":["0:0.5.3.9-2.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"satellite","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"satellite-capsule","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"satellite-debug-tools","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"candlepin","fixed_in":["0:0.9.54.26-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"candlepin-selinux","fixed_in":["0:0.9.54.26-1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-compute","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-debug","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-ec2","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-gce","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-installer","fixed_in":["1:1.11.0.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-installer-katello","fixed_in":["0:3.0.0.101-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-libvirt","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-openstack","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-ovirt","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-postgresql","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-rackspace","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-vmware","fixed_in":["0:1.11.0.86-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"katello","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-capsule","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-common","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-debug","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-installer-base","fixed_in":["0:3.0.0.101-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-service","fixed_in":["0:3.0.0-33.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"libqpid-dispatch","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-admin-client","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet-admin-extensions","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet-plugins","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet-tools","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-selinux","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-server","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-agent-lib","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-bindings","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-client-lib","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-common","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-oid_validation","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-puppet-common","fixed_in":["0:2.8.7.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-repoauth","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-streamer","fixed_in":["0:2.8.7.18-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"python-qpid-proton","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch-debuginfo","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch-router","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch-tools","fixed_in":["0:0.4-27.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-proton","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-proton-c","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-proton-debuginfo","fixed_in":["0:0.9-21.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"rubygem-smart_proxy_openscap","fixed_in":["0:0.5.3.9-2.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite-capsule","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite-cli","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite-debug-tools","fixed_in":["0:6.2.14-4.0.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"tfm-rubygem-foreman_theme_satellite","fixed_in":["0:0.1.47.2-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.1::el6","package":"tfm-rubygem-katello","fixed_in":["0:3.0.0.162-1.el6sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman-debug","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman-installer","fixed_in":["1:1.11.0.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman-installer-katello","fixed_in":["0:3.0.0.101-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-capsule","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-debug","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-installer-base","fixed_in":["0:3.0.0.101-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-service","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"libqpid-dispatch","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-admin-client","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-nodes-child","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-nodes-common","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-nodes-parent","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-puppet","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-puppet-admin-extensions","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-puppet-plugins","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-selinux","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-server","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-agent-lib","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-bindings","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-client-lib","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-common","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-oid_validation","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-puppet-common","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-repoauth","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-streamer","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-qpid-proton","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-twisted-web","fixed_in":["0:12.1.0-5.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch-debuginfo","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch-router","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch-tools","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-proton","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-proton-c","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-proton-debuginfo","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"rubygem-smart_proxy_openscap","fixed_in":["0:0.5.3.9-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"satellite","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"satellite-capsule","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"satellite-debug-tools","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"candlepin","fixed_in":["0:0.9.54.26-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"candlepin-selinux","fixed_in":["0:0.9.54.26-1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-compute","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-debug","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-ec2","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-gce","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-installer","fixed_in":["1:1.11.0.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-installer-katello","fixed_in":["0:3.0.0.101-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-libvirt","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-openstack","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-ovirt","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-postgresql","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-rackspace","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-vmware","fixed_in":["0:1.11.0.86-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"katello","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-capsule","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-common","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-debug","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-installer-base","fixed_in":["0:3.0.0.101-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-service","fixed_in":["0:3.0.0-33.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"libqpid-dispatch","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-admin-client","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet-admin-extensions","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet-plugins","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet-tools","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-selinux","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-server","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-agent-lib","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-bindings","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-client-lib","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-common","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-oid_validation","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-puppet-common","fixed_in":["0:2.8.7.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-repoauth","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-streamer","fixed_in":["0:2.8.7.18-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-qpid-proton","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"python-twisted-web","fixed_in":["0:12.1.0-5.el7_2"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch-debuginfo","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch-router","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch-tools","fixed_in":["0:0.4-27.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-proton","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-proton-c","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-proton-debuginfo","fixed_in":["0:0.9-21.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"rubygem-smart_proxy_openscap","fixed_in":["0:0.5.3.9-2.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite-capsule","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite-cli","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite-debug-tools","fixed_in":["0:6.2.14-4.0.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"tfm-rubygem-foreman_theme_satellite","fixed_in":["0:0.1.47.2-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"tfm-rubygem-katello","fixed_in":["0:3.0.0.162-1.el7sat"],"sources":["osv"]},{"ecosystem":"Red Hat:satellite:6.2::el7","package":"tfm-rubygem-katello_ostree","fixed_in":["0:3.0.0.162-1.el7sat"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python-Twisted","fixed_in":["15.2.1-8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 3","package":"python-Twisted","fixed_in":["15.2.1-8.1"],"sources":["osv"]},{"ecosystem":"SUSE:Enterprise Storage 4","package":"python-Twisted","fixed_in":["15.2.1-8.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"twisted","fixed_in":["13.2.0-1ubuntu1.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"twisted","fixed_in":["16.0.0-1ubuntu0.2"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"python-Twisted","fixed_in":["16.4.1-1.2"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"PyPI","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3.1"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.0-1"}]}]},{"source":"osv","ecosystem":"PyPI","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3.1"}]}],"versions":["1.0.1","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.1.0","1.1.1","1.2.0","10.0.0","10.1.0","10.2.0","11.0.0","11.1.0","12.0.0","12.1.0","12.2.0","12.3.0","13.0.0","13.1.0","13.2.0","14.0.0","14.0.1","14.0.2","15.0.0","15.1.0","15.2.0","15.2.1","15.3.0","15.4.0","15.5.0","16.0.0","16.1.0","16.1.1","16.2.0","16.3.0","2.1.0","2.4.0","2.5.0","8.0.0","8.0.1","8.1.0","8.2.0","9.0.0"]},{"source":"osv","ecosystem":"Mageia:5","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"14.0.1-3.1.mga5"}]}]},{"source":"osv","ecosystem":"PyPI","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.3.1"}]}],"versions":["1.0.1","1.0.3","1.0.4","1.0.5","1.0.6","1.0.7","1.1.0","1.1.1","1.2.0","10.0.0","10.1.0","10.2.0","11.0.0","11.1.0","12.0.0","12.1.0","12.2.0","12.3.0","13.0.0","13.1.0","13.2.0","14.0.0","14.0.1","14.0.2","15.0.0","15.1.0","15.2.0","15.2.1","15.3.0","15.4.0","15.5.0","16.0.0","16.1.0","16.1.1","16.2.0","16.3.0","2.1.0","2.4.0","2.5.0","8.0.0","8.0.1","8.1.0","8.2.0","9.0.0"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.0-5.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.0-5.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.2.0-5.el6_8"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.0.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"libqpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3.9-2.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.1::el6","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.54.26-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.54.26-1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.0.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"libqpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-puppet-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3.9-2.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"tfm-rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.47.2-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.1::el6","package":"tfm-rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.162-1.el6sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.0.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"libqpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-nodes-child","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-nodes-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-nodes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3.9-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.2::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.54.26-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.54.26-1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-compute","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-gce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.11.0.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-rackspace","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.0.86-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-installer-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.101-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"katello-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-33.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"libqpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-admin-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet-admin-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-puppet-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"pulp-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-agent-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-client-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-oid_validation","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-puppet-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-repoauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-pulp-streamer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.7.18-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"python-twisted-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.1.0-5.el7_2"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch-router","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-dispatch-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-27.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-proton","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-proton-c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"qpid-proton-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9-21.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"rubygem-smart_proxy_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3.9-2.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"satellite-debug-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.2.14-4.0.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"tfm-rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.47.2-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"tfm-rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.162-1.el7sat"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite:6.2::el7","package":"tfm-rubygem-katello_ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0.162-1.el7sat"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Web and Scripting 12","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.1-8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 3","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.1-8.1"}]}]},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.2.1-8.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2.0-1ubuntu1.2"}]}],"versions":["13.0.0-1ubuntu1","13.2.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0.0-1ubuntu0.2"}]}],"versions":["15.2.1-1ubuntu2","15.5.0-1","15.5.0-2","15.5.0-2ubuntu1","15.5.0-4","16.0.0~pre1-1","16.0.0~pre1-1ubuntu1","16.0.0~pre1-2ubuntu1","16.0.0~pre1-3","16.0.0-1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"13.2.0-1ubuntu1.2"}]}],"versions":["13.0.0-1ubuntu1","13.2.0-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.0.0-1ubuntu0.2"}]}],"versions":["15.2.1-1ubuntu2","15.5.0-1","15.5.0-2","15.5.0-2ubuntu1","15.5.0-4","16.0.0~pre1-1","16.0.0~pre1-1ubuntu1","16.0.0~pre1-2ubuntu1","16.0.0~pre1-3","16.0.0-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-Twisted","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"16.4.1-1.2"}]}]}],"products":[{"vendor":"twisted","product":"twisted"}],"references":[{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2016-3090545.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://www.openwall.com/lists/oss-security/2016/07/18/6","tags":["x_refsource_MISC","x_transferred","Mailing List","Third Party Advisory","advisory","web"]},{"url":"https://twistedmatrix.com/trac/ticket/8623","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://twistedmatrix.com/pipermail/twisted-web/2016-August/005268.html","tags":["x_refsource_CONFIRM","x_transferred","Mailing List","Vendor Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-1000111","tags":["advisory"]},{"url":"https://github.com/pypa/advisory-database/tree/main/vulns/twisted/PYSEC-2020-214.yaml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-3gqj-cmxr-p4x2","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2016-1000111","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2016-1000111","tags":["advisory"]},{"url":"https://github.com/twisted/twisted","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2016-0340.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=19496","tags":["report"]},{"url":"https://rhn.redhat.com/errata/RHSA-2016-1978.html","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2016:1978","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1357345","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2016/rhsa-2016_1978.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2016-1000111","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-1000111","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:0273","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1319165","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1369189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1421594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1424689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1440235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1454743","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1465146","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482204","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1482539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1491160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1491363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1492355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1497337","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1515195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1519904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1531609","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_0273.json","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2017/suse-su-20170114-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/989997","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2016-1000111","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2016-1000111","tags":["report"]},{"url":"https://marc.info/?l=oss-security\u0026m=146885145004975\u0026w=2","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3585-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2016-1000111","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2020-03-11T19:05:31Z","modified":"2024-08-06T03:55:26.416Z","updated_at":"2026-11-02T14:33:36.802481Z"}],"euvd":[{"id":"EUVD-2020-0227","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2020-03-11T19:05:31Z","modified":"2024-08-06T03:55:26Z","updated_at":"2026-11-03T02:22:21.756675Z"}],"ghsa":[{"id":"GHSA-3gqj-cmxr-p4x2","title":"Forced Browsing in Twisted","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the `HTTP_PROXY` environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an `httpoxy` issue.","status":"published","published":"2021-04-30T17:32:28Z","modified":"2024-11-18T22:24:20Z","cvss":[{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-425"],"updated_at":"2026-11-02T14:38:20.833758Z"}],"nvd":[{"id":"CVE-2016-1000111","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2020-03-11T20:15:11.96Z","modified":"2026-06-17T00:38:41.76Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-425"],"updated_at":"2026-11-02T14:03:40.524348Z"}],"osv":[{"id":"BELL-CVE-2016-1000111","title":"CVE-2016-1000111 does not affect BellSoft software","status":"withdrawn","published":"2023-08-31T12:13:56.105895Z","modified":"2026-01-26T09:49:04.179552Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:28:13.47097Z"},{"id":"CVE-2016-1000111","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2020-03-11T20:15:11.96Z","modified":"2026-10-24T10:30:19.384649759Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:01.531338Z"},{"id":"DEBIAN-CVE-2016-1000111","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2020-03-11T20:15:11.96Z","modified":"2026-09-22T07:01:08.098460638Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:27.323751Z"},{"id":"GHSA-3gqj-cmxr-p4x2","title":"Forced Browsing in Twisted","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the `HTTP_PROXY` environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an `httpoxy` issue.","status":"published","published":"2021-04-30T17:32:28Z","modified":"2024-11-18T22:36:34.367159Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"},{"version":"4.0","score":6.9,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N","level":"medium"}],"cwes":["CWE-425"],"updated_at":"2026-11-02T15:46:35.747385Z"},{"id":"RHSA-2016:1978","title":"Red Hat Security Advisory: python-twisted-web security update","status":"published","published":"2024-09-13T12:28:41Z","modified":"2026-06-29T10:13:51Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:03.734507Z"},{"id":"RHSA-2018:0273","title":"Red Hat Security Advisory: Red Hat Satellite 6 security, bug fix, and enhancement update","status":"published","published":"2024-09-13T12:29:10Z","modified":"2026-06-29T10:19:08Z","cvss":[{"version":"3.0","score":5,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2016-1000111","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2016-07-18T00:00:00Z","modified":"2026-02-04T02:40:26.681748Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:11.100633Z"},{"id":"MGASA-2016-0340","title":"Updated python-twisted-web packages fix a security vulnerability","description":"It was discovered that python-twisted-web used the value of the Proxy header\nfrom HTTP requests to initialize the HTTP_PROXY environment variable for CGI\nscripts, which in turn was incorrectly used by certain HTTP client\nimplementations to configure the proxy for outgoing HTTP requests. A remote\nattacker could possibly use this flaw to redirect HTTP requests performed by \na CGI script to an attacker-controlled proxy via a malicious HTTP request.\n(CVE-2016-1000111)\n","status":"published","published":"2016-10-12T13:46:10Z","modified":"2026-04-16T06:24:03.57552897Z","updated_at":"2026-11-02T15:49:40.103088Z"},{"id":"openSUSE-SU-2024:10162-1","title":"python3-Twisted-16.4.1-1.2 on GA media","description":"These are all security issues fixed in the python3-Twisted-16.4.1-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:56:52.14983Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"PYSEC-2020-214","description":"Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect a CGI application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue.","status":"published","published":"2020-03-11T20:15:00Z","modified":"2023-11-08T03:58:07.229639Z","updated_at":"2026-11-02T15:52:52.192131Z"},{"id":"SUSE-SU-2017:0114-1","title":"Security update for python-Twisted","description":"\nThis update for python-Twisted fixes the following issues:\n\n- CVE-2016-1000111: sets environmental variable HTTP_PROXY based on user\n  supplied Proxy request header (bsc#989997)\n\n","status":"published","published":"2017-01-12T10:36:01Z","modified":"2026-02-04T04:36:09.185824Z","updated_at":"2026-11-02T15:53:43.83457Z"},{"id":"USN-3585-1","title":"twisted vulnerability","description":"It was discovered that Twisted incorrectly handled certain HTTP requests.\nAn attacker could possibly use this issue to execute arbitrary code.\n","status":"published","published":"2018-03-05T16:08:00Z","modified":"2026-02-10T04:41:17Z","updated_at":"2026-11-02T16:58:13.496563Z"}]}}