{"id":"CVE-2021-22904","aliases":["DEBIAN-CVE-2021-22904","DLA-2655-1","DSA-4929-1","EUVD-2021-1009","GHSA-7wjx-3g7j-8584","OESA-2021-1248","RHSA-2021:4702","SUSE-SU-2022:2108-1","UBUNTU-CVE-2021-22904","openSUSE-SU-2024:11317-1","openSUSE-SU-2024:11318-1","openSUSE-SU-2024:11821-1"],"status":"published","title":"Possible DoS Vulnerability in Action Controller Token Authentication","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.04868,"percentile":0.92118,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400"],"published":"2021-05-05T19:49:12Z","modified":"2026-10-24T10:30:57Z","fixes":[{"ecosystem":"RubyGems","package":"actionpack","fixed_in":["6.0.3.7","6.1.3.2","5.2.6","5.2.4.6"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"rails","fixed_in":["2:6.0.3.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"rails","fixed_in":["2:6.0.3.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"rails","fixed_in":["2:6.0.3.7+dfsg-1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"rubygem-actionpack","fixed_in":["5.2.4.4-3.oe1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"last_affected":"6.0.3.6"},{"fixed":"6.0.3.7"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"last_affected":"6.1.3.1"},{"fixed":"6.1.3.2"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.5"},{"fixed":"5.2.6"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"last_affected":"5.2.4.5"},{"fixed":"5.2.4.6"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0.3.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0.3.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:6.0.3.7+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:4.2.7.1-1+deb9u5"}]}],"versions":["2:4.2.7.1-1","2:4.2.7.1-1+deb9u1","2:4.2.7.1-1+deb9u2","2:4.2.7.1-1+deb9u3","2:4.2.7.1-1+deb9u4"],"bundled":2},{"source":"osv","ecosystem":"Debian:10","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:5.2.2.1+dfsg-1+deb10u3"}]}],"versions":["2:5.2.2.1+dfsg-1","2:5.2.2.1+dfsg-1+deb10u1","2:5.2.2.1+dfsg-1+deb10u2"],"bundled":3},{"source":"osv","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.0.0"},{"fixed":"6.0.3.7"}]}],"versions":["6.0.0","6.0.1","6.0.1.rc1","6.0.2","6.0.2.1","6.0.2.2","6.0.2.rc1","6.0.2.rc2","6.0.3","6.0.3.1","6.0.3.2","6.0.3.3","6.0.3.4","6.0.3.5","6.0.3.6","6.0.3.rc1"]},{"source":"osv","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.1.0"},{"fixed":"6.1.3.2"}]}],"versions":["6.1.0","6.1.1","6.1.2","6.1.2.1","6.1.3","6.1.3.1"]},{"source":"osv","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"5.2.5"},{"fixed":"5.2.6"}]}],"versions":["5.2.5"]},{"source":"osv","ecosystem":"RubyGems","package":"actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"5.2.4.6"}]}],"versions":["4.0.0","4.0.1","4.0.1.rc1","4.0.1.rc2","4.0.1.rc3","4.0.1.rc4","4.0.10","4.0.10.rc1","4.0.10.rc2","4.0.11","4.0.11.1","4.0.12","4.0.13","4.0.13.rc1","4.0.2","4.0.3","4.0.4","4.0.4.rc1","4.0.5","4.0.6","4.0.6.rc1","4.0.6.rc2","4.0.6.rc3","4.0.7","4.0.8","4.0.9","4.1.0","4.1.0.beta1","4.1.0.beta2","4.1.0.rc1","4.1.0.rc2","4.1.1","4.1.10","4.1.10.rc1","4.1.10.rc2","4.1.10.rc3","4.1.10.rc4","4.1.11","4.1.12","4.1.12.rc1","4.1.13","4.1.13.rc1","4.1.14","4.1.14.1","4.1.14.2","4.1.14.rc1","4.1.14.rc2","4.1.15","4.1.15.rc1","4.1.16","4.1.16.rc1","4.1.2","4.1.2.rc1","4.1.2.rc2","4.1.2.rc3","4.1.3","4.1.4","4.1.5","4.1.6","4.1.6.rc1","4.1.6.rc2","4.1.7","4.1.7.1","4.1.8","4.1.9","4.1.9.rc1","4.2.0","4.2.0.beta1","4.2.0.beta2","4.2.0.beta3","4.2.0.beta4","4.2.0.rc1","4.2.0.rc2","4.2.0.rc3","4.2.1","4.2.1.rc1","4.2.1.rc2","4.2.1.rc3","4.2.1.rc4","4.2.10","4.2.10.rc1","4.2.11","4.2.11.1","4.2.11.2","4.2.11.3","4.2.2","4.2.3","4.2.3.rc1","4.2.4","4.2.4.rc1","4.2.5","4.2.5.1","4.2.5.2","4.2.5.rc1","4.2.5.rc2","4.2.6","4.2.6.rc1","4.2.7","4.2.7.1","4.2.7.rc1","4.2.8","4.2.8.rc1","4.2.9","4.2.9.rc1","4.2.9.rc2","5.0.0","5.0.0.1","5.0.0.beta1","5.0.0.beta1.1","5.0.0.beta2","5.0.0.beta3","5.0.0.beta4","5.0.0.racecar1","5.0.0.rc1","5.0.0.rc2","5.0.1","5.0.1.rc1","5.0.1.rc2","5.0.2","5.0.2.rc1","5.0.3","5.0.4","5.0.4.rc1","5.0.5","5.0.5.rc1","5.0.5.rc2","5.0.6","5.0.6.rc1","5.0.7","5.0.7.1","5.0.7.2","5.1.0","5.1.0.beta1","5.1.0.rc1","5.1.0.rc2","5.1.1","5.1.2","5.1.2.rc1","5.1.3","5.1.3.rc1","5.1.3.rc2","5.1.3.rc3","5.1.4","5.1.4.rc1","5.1.5","5.1.5.rc1","5.1.6","5.1.6.1","5.1.6.2","5.1.7","5.1.7.rc1","5.2.0","5.2.0.beta1","5.2.0.beta2","5.2.0.rc1","5.2.0.rc2","5.2.1","5.2.1.1","5.2.1.rc1","5.2.2","5.2.2.1","5.2.2.rc1","5.2.3","5.2.3.rc1","5.2.4","5.2.4.1","5.2.4.2","5.2.4.3","5.2.4.4","5.2.4.5","5.2.4.rc1"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rubygem-actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.2.4.4-3.oe1"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.13.3-2.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-activerecord-session_store","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.0-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.0-3.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.0-3.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"tfm-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-nokogiri","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.3-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.10.0-3.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.17-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.2.17-2.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.4-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.4-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-actionpack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3.7-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.3.7-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.24-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.2-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"tfm-rubygem-addressable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el7sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.10::el7","package":"python3-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.10::el7","package":"python3-urllib3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.26.5-1.el7pc"}]}],"bundled":21},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"rubygem-actionpack-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.12.1"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"rubygem-activesupport-5_1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.4-150000.3.6.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.1.10-1","2:4.2.5-1","2:4.2.5.1-1","2:4.2.5.2-2","2:4.2.6-1","2:4.2.6-1ubuntu0.1~esm1","2:4.2.6-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:4.2.9-2","2:4.2.9-4","2:4.2.10-0ubuntu4","2:4.2.10-0ubuntu4+esm1","2:4.2.10-0ubuntu4+esm2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:5.2.2.1+dfsg-1ubuntu1","2:5.2.3+dfsg-3","2:5.2.3+dfsg-3ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:6.0.3.7+dfsg-2","2:6.1.4.1+dfsg-8ubuntu2","2:6.1.4.1+dfsg-8ubuntu2+esm1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:6.1.7.3+dfsg-2build1","2:6.1.7.3+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:6.1.7.3+dfsg-7","2:7.2.2.1+dfsg-7"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.2.3+dfsg-2","2:7.2.3.2+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2:7.2.2.1+dfsg-7","2:7.2.2.2+dfsg-2","2:7.2.3+dfsg-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-actionpack-6.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.0.4.4-1.1"}]}],"bundled":12}],"products":[{"vendor":"rails","product":"https://github.com/rails/rails"},{"vendor":"rubyonrails","product":"rails"}],"references":[{"url":"https://hackerone.com/reports/1101125","tags":["x_refsource_MISC","x_transferred","Permissions Required","Third Party Advisory","report","web"]},{"url":"https://discuss.rubyonrails.org/t/cve-2021-22904-possible-dos-vulnerability-in-action-controller-token-authentication/77869","tags":["x_refsource_MISC","x_transferred","Exploit","Mitigation","Patch","Vendor Advisory","fix","web"]},{"url":"https://security.netapp.com/advisory/ntap-20210805-0009/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://github.com/rails/rails/releases/tag/v5.2.4.6","tags":["web"]},{"url":"https://github.com/rails/rails/releases/tag/v5.2.6","tags":["web"]},{"url":"https://github.com/rails/rails/releases/tag/v6.0.3.7","tags":["web"]},{"url":"https://github.com/rails/rails/releases/tag/v6.1.3.2","tags":["web"]},{"url":"https://groups.google.com/g/rubyonrails-security/c/Pf1TjkOBdyQ","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22904","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2021-22904.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-7wjx-3g7j-8584","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-22904","tags":["advisory"]},{"url":"https://github.com/rails/rails","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20210805-0009","tags":["web"]},{"url":"https://openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1248","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4702","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1299602","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1334989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1392063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1417752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1437586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1548966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1566630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1573241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1583209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1605147","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1611621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1615015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1632961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636403","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1636426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1649011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1654801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1655245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1656127","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1663340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1664120","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1668374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1685738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1703951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1716314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1719661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1720664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1721320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729029","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1729843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1731987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1732522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1737536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1744931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1747751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1758704","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1759111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1760843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1771231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1775784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1777420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1784552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1794753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1798686","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804161","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1804620","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1805654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1806462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1807677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808368","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1810600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1816270","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1817176","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829107","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1836868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837556","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1844972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845498","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848111","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1848981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1851415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1853710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1856730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1860466","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1861493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1862372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1863597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1868357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1872534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1874587","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1879020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1882123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1883503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1885240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888332","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1893617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1899873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1900664","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1901504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1904369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1905814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1906919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1908101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1910412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1911338","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1911670","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912589","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1913311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1914902","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1915748","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1917509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1918353","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1919976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921453","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1921522","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1923320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924255","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924599","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1924867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925172","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1925429","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1926840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1927775","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1928479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929217","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929361","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929818","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1930926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931316","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932486","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932700","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1933364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934086","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934427","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1934795","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1935724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1936946","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937824","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940832","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1940857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1941997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944322","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1945661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1947867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1948258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951102","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1951878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952962","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1953845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954021","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1954996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956190","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956461","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1957588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1958415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1959555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961382","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1961886","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962119","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962140","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962820","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962867","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962873","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962928","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1962961","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964103","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964874","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965901","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966626","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1966942","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967138","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967649","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968117","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1968608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1969905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970391","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970547","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1970965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971072","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971076","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1971395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972066","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1972995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1973546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974733","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975105","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975801","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976047","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976051","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976231","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976783","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976872","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977745","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1977840","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978571","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978697","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979239","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979319","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1979929","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980509","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1980798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981401","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1981869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1982759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983043","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1983768","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984025","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984125","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984890","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1984965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1985958","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986002","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986292","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986356","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986903","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986948","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1986996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1987205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1988460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1989721","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990828","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990897","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991992","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993216","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993951","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994215","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994669","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994923","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995171","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996371","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1996952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997065","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997623","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998291","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998409","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1998566","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999116","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1999679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2000534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001091","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001476","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2001674","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2002693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2003764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2005754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2006959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2008015","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2009630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010863","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2011696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2012826","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2019177","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4702.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14853","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-pwfw-mgfj-7g3g","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14859","tags":["advisory"]},{"url":"https://github.com/warner/python-ecdsa/releases/tag/python-ecdsa-0.13.3","tags":["article"]},{"url":"https://pypi.org/project/ecdsa/0.13.3/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-25025","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-25025","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-25025","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-cvw2-xj8r-mjf7","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8130","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8130","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8130","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jppv-gw3r-w3q8","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8908","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8908","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8908","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-14343","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-14343","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-14343","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-8q59-q68h-6hv4","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-26247","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-26247","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-26247","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-vr8q-g5c7-m54m","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3413","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3413","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3413","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3494","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3494","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3494","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-20256","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-20256","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-20256","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-21330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-21330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-21330","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-v6wp-4m6f-gcjg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22885","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22885","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22885","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22902","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22902","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22902","tags":["advisory"]},{"url":"https://discuss.rubyonrails.org/t/cve-2021-22902-possible-denial-of-service-vulnerability-in-action-dispatch/77866","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22904","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22904","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-28658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-28658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-28658","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/apr/06/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-29509","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-29509","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-29509","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-q28m-8xjw-8vr5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-31542","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-31542","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31542","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/may/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-32740","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-32740","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-32740","tags":["advisory"]},{"url":"https://github.com/sporkmonger/addressable/security/advisories/GHSA-jxhc-q857-3j6g","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33203","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33203","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33203","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2021/jun/02/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33503","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-q2q7-5pp4-w6pg","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-33571","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-33571","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-33571","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222108-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185780","tags":["report"]},{"url":"https://bugzilla.suse.com/1196182","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22904","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-23633","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2021-22904","tags":["report"]},{"url":"https://github.com/rails/rails/commit/eab8c20f3ef6a022c4c11b439b1b22cef1768d5e","tags":["report"]},{"url":"https://github.com/rails/rails/commit/d861fa8ade353390c4419b53a6c6b41f3005b1f2","tags":["report"]},{"url":"https://github.com/rails/rails/commit/3d9e9fdf14e044b3ba66f909582c228a9d4ffb5c","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2019-16782","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-5418","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8164","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8166","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22885","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8185","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22881","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22902","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-22942","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-44528","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2021-22904","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","status":"published","published":"2021-06-11T15:49:38Z","modified":"2024-08-03T18:58:25.438Z","cwes":["CWE-400"],"updated_at":"2026-11-02T14:32:58.028461Z"}],"euvd":[{"id":"EUVD-2021-1009","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","status":"published","published":"2021-06-11T15:49:38Z","modified":"2024-08-03T18:58:25Z","updated_at":"2026-11-03T03:25:01.154097Z"}],"ghsa":[{"id":"GHSA-7wjx-3g7j-8584","title":"Possible DoS Vulnerability in Action Controller Token Authentication","description":"There is a possible DoS vulnerability in the Token Authentication logic in Action Controller.\n\nVersions Affected:  \u003e= 4.0.0\nNot affected:       \u003c 4.0.0\nFixed Versions:     6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6\n\nImpact\n------\nImpacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.  Impacted code will look something like this:\n\n```\nclass PostsController \u003c ApplicationController\n  before_action :authenticate\n\n  private\n\n  def authenticate\n    authenticate_or_request_with_http_token do |token, options|\n      # ...\n    end\n  end\nend\n```\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThe following monkey patch placed in an initializer can be used to work around the issue:\n\n```ruby\nmodule ActionController::HttpAuthentication::Token\n  AUTHN_PAIR_DELIMITERS = /(?:,|;|\\t)/\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 5-2-http-authentication-dos.patch - Patch for 5.2 series\n* 6-0-http-authentication-dos.patch - Patch for 6.0 series\n* 6-1-http-authentication-dos.patch - Patch for 6.1 series\n\nPlease note that only the 6.1.Z, 6.0.Z, and 5.2.Z series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\nThank you to https://hackerone.com/wonda_tea_coffee for reporting this issue!","status":"published","published":"2021-05-05T19:49:12Z","modified":"2023-08-17T05:02:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:37:00.074932Z"}],"nvd":[{"id":"CVE-2021-22904","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","status":"published","published":"2021-06-11T16:15:11.517Z","modified":"2026-06-17T03:37:59.707Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:06:54.439974Z"}],"osv":[{"id":"CVE-2021-22904","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","status":"published","published":"2021-06-11T16:15:11.517Z","modified":"2026-10-24T10:30:57.013508399Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:18.367807Z"},{"id":"DEBIAN-CVE-2021-22904","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","status":"published","published":"2021-06-11T16:15:11.517Z","modified":"2026-10-23T18:03:11.634679243Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"GHSA-7wjx-3g7j-8584","title":"Possible DoS Vulnerability in Action Controller Token Authentication","description":"There is a possible DoS vulnerability in the Token Authentication logic in Action Controller.\n\nVersions Affected:  \u003e= 4.0.0\nNot affected:       \u003c 4.0.0\nFixed Versions:     6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6\n\nImpact\n------\nImpacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.  Impacted code will look something like this:\n\n```\nclass PostsController \u003c ApplicationController\n  before_action :authenticate\n\n  private\n\n  def authenticate\n    authenticate_or_request_with_http_token do |token, options|\n      # ...\n    end\n  end\nend\n```\n\nAll users running an affected release should either upgrade or use one of the workarounds immediately.\n\nReleases\n--------\nThe fixed releases are available at the normal locations.\n\nWorkarounds\n-----------\nThe following monkey patch placed in an initializer can be used to work around the issue:\n\n```ruby\nmodule ActionController::HttpAuthentication::Token\n  AUTHN_PAIR_DELIMITERS = /(?:,|;|\\t)/\nend\n```\n\nPatches\n-------\nTo aid users who aren't able to upgrade immediately we have provided patches for the two supported release series. They are in git-am format and consist of a single changeset.\n\n* 5-2-http-authentication-dos.patch - Patch for 5.2 series\n* 6-0-http-authentication-dos.patch - Patch for 6.0 series\n* 6-1-http-authentication-dos.patch - Patch for 6.1 series\n\nPlease note that only the 6.1.Z, 6.0.Z, and 5.2.Z series are supported at present. Users of earlier unsupported releases are advised to upgrade as soon as possible as we cannot guarantee the continued availability of security fixes for unsupported releases.\n\nCredits\n-------\nThank you to https://hackerone.com/wonda_tea_coffee for reporting this issue!","status":"published","published":"2021-05-05T19:49:12Z","modified":"2024-02-16T08:20:03.07599Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:46:41.732368Z"},{"id":"OESA-2021-1248","title":"rubygem-actionpack security update","description":"Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling easy unit/integration testing that doesn't require a browser.\r\n\r\nSecurity Fix(es):\r\n\r\nThe actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.(CVE-2021-22904)","status":"published","published":"2021-07-03T11:04:29Z","modified":"2026-08-18T01:15:44.584664582Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:38.987987Z"},{"id":"RHSA-2021:4702","title":"Red Hat Security Advisory: Satellite 6.10 Release","status":"published","published":"2024-09-18T04:21:12Z","modified":"2026-10-13T10:02:40Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:09.077222Z"},{"id":"UBUNTU-CVE-2021-22904","description":"The actionpack ruby gem before 6.1.3.2, 6.0.3.7, 5.2.4.6, 5.2.6 suffers from a possible denial of service vulnerability in the Token Authentication logic in Action Controller due to a too permissive regular expression. Impacted code uses `authenticate_or_request_with_http_token` or `authenticate_with_http_token` for request authentication.","status":"published","published":"2021-06-11T16:15:00Z","modified":"2026-10-17T12:56:19.367358148Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:26.29421Z"},{"id":"DLA-2655-1","title":"rails - security update","status":"published","published":"2021-05-12T00:00:00Z","modified":"2026-03-09T01:21:24.955279Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4929-1","title":"rails - security update","status":"published","published":"2021-06-09T00:00:00Z","modified":"2026-03-09T02:10:48.592133Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2024:11317-1","title":"ruby2.7-rubygem-actionpack-5.2-5.2.6-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-actionpack-5.2-5.2.6-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:31:28.119679Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11318-1","title":"ruby2.7-rubygem-actionpack-6.0-6.0.4-1.2 on GA media","description":"These are all security issues fixed in the ruby2.7-rubygem-actionpack-6.0-6.0.4-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:46:53.071873Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:11821-1","title":"ruby3.1-rubygem-actionpack-6.0-6.0.4.4-1.1 on GA media","description":"These are all security issues fixed in the ruby3.1-rubygem-actionpack-6.0-6.0.4.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:34:58.241748Z","updated_at":"2026-11-02T16:58:35.195147Z"},{"id":"SUSE-SU-2022:2108-1","title":"Security update for rubygem-actionpack-5_1, rubygem-activesupport-5_1","description":"This update for rubygem-actionpack-5_1 and rubygem-activesupport-5_1 fixes the following issues:\n\n- CVE-2021-22904: Fixed possible DoS Vulnerability in Action Controller Token Authentication (bsc#1185780)\n- CVE-2022-23633: Fixed possible exposure of information vulnerability in Action Pack (bsc#1196182)\n","status":"published","published":"2022-06-16T13:26:33Z","modified":"2026-02-04T03:07:13.513967Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}