{"id":"CVE-2021-21648","aliases":["EUVD-2021-1323","GHSA-gchq-9r68-6jwv","RHSA-2021:2437"],"status":"published","title":"Cross-Site Request Forgery in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-11","score":0.11308,"percentile":0.96033,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-79"],"published":"2021-05-11T14:15:20Z","modified":"2026-10-24T10:30:57Z","fixes":[{"ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","fixed_in":["2.3.19","2.3.15.1","2.3.14.1","2.3.13.1","2.3.7.1","2.3.0.1"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.16"},{"fixed":"2.3.19"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.15"},{"last_affected":"2.3.15"},{"fixed":"2.3.15.1"}]}],"versions":["2.3.15"]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.14"},{"last_affected":"2.3.14"},{"fixed":"2.3.14.1"}]}],"versions":["2.3.14"]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.8"},{"fixed":"2.3.13.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.1"},{"fixed":"2.3.7.1"}]}]},{"source":"ghsa","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0.1"}]}]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.16"},{"fixed":"2.3.19"}]}],"versions":["2.3.17","2.3.18"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.15"},{"fixed":"2.3.15.1"}]}],"versions":["2.3.15"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.14"},{"fixed":"2.3.14.1"}]}],"versions":["2.3.14"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.8"},{"fixed":"2.3.13.1"}]}],"versions":["2.3.10","2.3.11","2.3.12","2.3.13","2.3.8","2.3.9"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.3.1"},{"fixed":"2.3.7.1"}]}],"versions":["2.3.1","2.3.2","2.3.3","2.3.4","2.3.5","2.3.6","2.3.7"]},{"source":"osv","ecosystem":"Maven","package":"org.jenkins-ci.plugins:credentials","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.3.0.1"}]}],"versions":["1.0","1.1","1.10","1.11","1.12","1.13","1.14","1.15","1.16","1.16.1","1.17","1.18","1.19","1.2","1.20","1.21","1.22","1.23","1.24","1.25","1.26","1.27","1.28","1.3","1.3.1","1.4","1.5","1.6","1.7","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.8","1.8.1","1.8.2","1.8.3","1.8.4","1.9","1.9.1","1.9.2","1.9.3","1.9.4","2.0","2.0.1","2.0.2","2.0.3","2.0.4","2.0.5","2.0.6","2.0.7","2.1.0","2.1.1","2.1.10","2.1.11","2.1.12","2.1.13","2.1.14","2.1.15","2.1.16","2.1.17","2.1.18","2.1.19","2.1.2","2.1.3","2.1.4","2.1.5","2.1.6","2.1.7","2.1.8","2.1.9","2.2.0","2.2.1","2.3.0"]},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ignition-validate-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"haproxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el7","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el7"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"afterburn-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"butane-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.1-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages-issuegen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"console-login-helper-messages-profile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.3-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-bootinfra","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-bootinfra-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"coreos-installer-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.0-6.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-o-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.2-5.rhaos4.8.gitb27d974.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"cri-tools-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.21.0-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"haproxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"haproxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.13-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-all","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-ipa-ppc64le","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ironic-images-ipa-x86_64","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2021.1-20210614.1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.289.1.1624020353-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"jenkins-2-plugins","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.1624022417-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"kata-containers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-api","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-conductor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-inspector-dnsmasq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openstack-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.2-0.20210611153100.bfa97cb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"openvswitch2.15-ipsec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-grub2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ostree-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.7-5.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-central","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-central-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-host","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-host-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-vtep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"ovn2.13-vtep-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.12.0-25.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-catatonit-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-docker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-plugins-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-remote","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-remote-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"podman-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.1-6.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-debtcollector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-0.20210324220630.649189d.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-0.20210608101214.ca2e4ba.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-ironic-prometheus-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-0.20210325143713.70e39c8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-5.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-0.20210325001456.6a66271.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.12.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-openstacksdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-concurrency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-concurrency-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.5.0-0.20210325050501.cfa2564.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-0.20210325043103.0d02866.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-db-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-i18n-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-log-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-policy-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-upgradecheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-0.20210325003851.9f95a6e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-oslo-utils-lang","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-0.20210325001012.7d7154f.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-sushy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-sushy-oem-idrac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python-tooz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-0.20210324235001.54448e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-debtcollector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-0.20210324220630.649189d.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-eventlet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.25.2-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-hardware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-hardware-detect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.27.0-0.20210406121246.756fedb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-inspector-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.6.1-0.20210406091336.579f59c.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.2-0.20210608101214.ca2e4ba.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-prometheus-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-0.20210325143713.70e39c8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-python-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.0.2-0.20210611153100.bfa97cb.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-ironic-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:17.0.4-0.20210713221218.a415e7e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-5.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-keystoneauth1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.0-0.20210325001456.6a66271.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kubernetes-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:12.0.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.12.1-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openstacksdk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openstacksdk-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.53.0-0.20210325011601.4629245.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openvswitch2.15","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-openvswitch2.15-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-9.el8fdp"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-concurrency","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-concurrency-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210325004915.7dcf9e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-config","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:8.5.0-0.20210325050501.cfa2564.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-context","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.0-0.20210325043103.0d02866.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-db","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-db-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.5.0-0.20210325041241.503db60.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-i18n","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.1-0.20210324221600.73187bd.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-log","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-log-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-0.20210409081224.9b29c90.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.0-0.20210325051823.d853485.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-serialization","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-serialization-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.0-0.20210325012242.8445e61.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-service-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-0.20210325014731.d25e454.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-upgradecheck","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-0.20210325003851.9f95a6e.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-oslo-utils-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-0.20210325043201.3288539.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-pyrsistent-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.0-3.el8ost"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-stevedore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-0.20210325001012.7d7154f.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-oem-idrac","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-oem-idrac-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-0.20210326152858.83b7eb0.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-sushy-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.1-0.20210428165244.bc49878.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"python3-tooz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-0.20210324235001.54448e9.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"redhat-release-coreos","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:48.84-4.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rteval-loads","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-12.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rteval-loads-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4-12.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"runc-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-98.rhaos4.8.gitcd80260.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rust-afterburn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"rust-afterburn-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.rhaos4.8.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"stress-ng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.06-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"stress-ng-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.06-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:openshift:4.8::el8","package":"toolbox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8-3.rhaos4.8.el8"}]}],"bundled":26}],"products":[{"vendor":"jenkins","product":"credentials"},{"vendor":"jenkins project","product":"jenkins credentials plugin"}],"references":[{"url":"https://www.jenkins.io/security/advisory/2021-05-11/#SECURITY-2349","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21648","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelist/blob/2d78eb36f4d084db7fb35f1535d8d84fdcb7d859/2021/21xxx/CVE-2021-21648.json","tags":["web"]},{"url":"https://github.com/jenkinsci/credentials-plugin/commit/41f3ec1143f80a7e80ab9a4a5f861f26fd3792cc","tags":["web"]},{"url":"https://github.com/advisories/GHSA-gchq-9r68-6jwv"},{"url":"https://github.com/jenkinsci/credentials-plugin","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2437","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918750","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978621","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2437.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3114","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3114","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3114","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/mperVMGa98w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3121","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3121","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3121","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3636","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3636","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3636","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939485","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20291","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20291","tags":["advisory"]},{"url":"https://unit42.paloaltonetworks.com/cve-2021-20291/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21419","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21419","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21419","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925161","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21602","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21602","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925160","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925157","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21604","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21604","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21605","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925143","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21605","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21605","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21606","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925159","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21606","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21606","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21607","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925156","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21607","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21607","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925140","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21608","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21608","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925141","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21609","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21609","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21610","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21610","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21610","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21611","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925145","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21611","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21611","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21623","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21623","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21623","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-03-18/#SECURITY-2180","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21639","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21639","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21639","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21640","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21640","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21640","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952146","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21642","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21642","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2204","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952148","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21643","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21643","tags":["advisory"]},{"url":"https://www.jenkins.io/security/advisory/2021-04-21/#SECURITY-2254","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21644","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952151","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21644","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21644","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952152","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21645","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21645","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21648","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21648","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25735","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25735","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25735","tags":["advisory"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-25737","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-25737","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-25737","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/102106","tags":["article"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-30465","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954736","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-004","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-30465","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30465","tags":["advisory"]},{"url":"https://github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2021-21648","description":"Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.","status":"published","published":"2021-05-11T14:15:20Z","modified":"2024-08-03T18:16:23.936Z","updated_at":"2026-11-02T14:32:59.802172Z"}],"euvd":[{"id":"EUVD-2021-1323","description":"Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.","status":"published","published":"2021-05-11T14:15:20Z","modified":"2024-08-03T18:16:23Z","updated_at":"2026-11-03T03:25:05.745586Z"}],"ghsa":[{"id":"GHSA-gchq-9r68-6jwv","title":"Cross-Site Request Forgery in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.\n\nJenkins Credentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 restricts the user-controlled information it provides to a safe subset.","status":"published","published":"2021-06-16T17:24:31Z","modified":"2023-12-26T11:57:21Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:37:28.04129Z"}],"nvd":[{"id":"CVE-2021-21648","description":"Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.","status":"published","published":"2021-05-11T15:15:07.873Z","modified":"2026-06-17T03:35:55.917Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:06:53.343329Z"}],"osv":[{"id":"CVE-2021-21648","description":"Jenkins Credentials Plugin 2.3.18 and earlier does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.","status":"published","published":"2021-05-11T15:15:07.873Z","modified":"2026-10-24T10:30:57.30929736Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"GHSA-gchq-9r68-6jwv","title":"Cross-Site Request Forgery in Jenkins Credentials Plugin","description":"Jenkins Credentials Plugin prior to 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 does not escape user-controlled information on a view it provides, resulting in a reflected cross-site scripting (XSS) vulnerability.\n\nJenkins Credentials Plugin 2.3.19, 2.3.15.1, 2.3.14.1, 2.3.13.1, 2.3.7.1, and 2.3.0.1 restricts the user-controlled information it provides to a safe subset.","status":"published","published":"2021-06-16T17:24:31Z","modified":"2024-02-16T08:08:59.139871Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T15:46:47.822182Z"},{"id":"RHSA-2021:2437","title":"Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update","status":"published","published":"2024-09-18T04:18:53Z","modified":"2026-10-09T10:02:33Z","cvss":[{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:08.619234Z"}]}}