{"id":"CVE-2022-31129","aliases":["CLSA-2026-1774916720","CLSA-2026-1792432046","DEBIAN-CVE-2022-31129","DLA-3295-1","EUVD-2022-6433","GHSA-wc69-rhjr-hc9g","MGASA-2022-0323","MGASA-2024-0067","RHSA-2022:6272","RHSA-2022:6277","RHSA-2022:6392","RHSA-2022:6393","RHSA-2023:1043","RHSA-2023:1044","RHSA-2023:1045","RHSA-2023:1486","RHSA-2023:3623","ROOT-APP-NPM-CVE-2022-31129","SUSE-SU-2022:3313-1","SUSE-SU-2022:3314-1","SUSE-SU-2022:3761-1","SUSE-SU-2023:0592-1","UBUNTU-CVE-2022-31129","USN-5559-1","USN-6550-1"],"status":"published","title":"Inefficient Regular Expression Complexity in moment","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.05551,"percentile":0.92901,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-1333","CWE-400"],"published":"2022-07-06T00:00:00Z","modified":"2026-11-06T10:15:03Z","fixes":[{"ecosystem":"npm","package":"moment","fixed_in":["2.29.4"],"sources":["ghsa","osv"]},{"ecosystem":"NuGet","package":"Moment.js","fixed_in":["2.29.4"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"node-moment","fixed_in":["2.29.4+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"node-moment","fixed_in":["2.29.4+ds-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"node-moment","fixed_in":["2.29.4+ds-1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"cockpit-ovirt","fixed_in":["0:0.16.2-1.el8ev"],"sources":["osv"]},{"ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"cockpit-ovirt-dashboard","fixed_in":["0:0.16.2-1.el8ev"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"moment","fixed_in":["2.24.0-aikido.3","2.27.0-aikido.2","2.26.0-aikido.2","2.26.0-aikido.1","2.29.3-aikido.1","2.19.3-aikido.1"],"sources":["osv"]},{"ecosystem":"Root:npm","package":"@rootio/moment","fixed_in":["2.24.0-root.io.1","2.27.0-root.io.1","2.24.0-root.io.2","2.24.0-root.io.3","2.27.0-root.io.2","2.26.0-root.io.2","2.26.0-root.io.1","2.29.3-root.io.1","2.19.3-root.io.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"node-moment","fixed_in":["2.20.1+ds-1ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"node-moment","fixed_in":["2.24.0+ds-2ubuntu0.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"node-moment","fixed_in":["2.29.1+ds-3ubuntu0.2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:22.04:LTS","package":"postfixadmin","fixed_in":["3.3.10-2ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.18.0"},{"fixed":"2.29.4"}]}]},{"source":"ghsa","ecosystem":"NuGet","package":"Moment.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.18.0"},{"fixed":"2.29.4"}]}]},{"source":"osv","ecosystem":"TuxCare:npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.24.0-tuxcare.0"},{"fixed":"2.24.0-tuxcare.1"}]}],"versions":["2.24.0"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.22.2-tuxcare.0"},{"fixed":"2.22.2-tuxcare.1"}]}],"versions":["2.22.2"],"bundled":2},{"source":"osv","ecosystem":"Debian:12","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.4+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.4+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.4+ds-1"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0+ds-1+deb10u1"}]}],"versions":["2.24.0+ds-1"],"bundled":2},{"source":"osv","ecosystem":"npm","package":"moment","ranges":[{"type":"SEMVER","events":[{"introduced":"2.18.0"},{"fixed":"2.29.4"}]}]},{"source":"osv","ecosystem":"NuGet","package":"Moment.js","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.18.0"},{"fixed":"2.29.4"}]}],"versions":["2.18.0","2.18.1","2.18.2","2.19.0","2.19.1","2.19.2","2.19.3","2.19.4","2.20.0","2.20.1","2.21.0","2.22.0","2.22.1","2.22.2","2.23.0","2.24.0","2.25.0","2.25.1","2.25.2","2.26.0","2.27.0","2.28.0","2.29.0","2.29.1","2.29.2","2.29.3"]},{"source":"osv","ecosystem":"Mageia:8","package":"jupyter-notebook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.12-1.mga8"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:8","package":"python-send2trash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.0-1.mga8"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:8","package":"python-nest-asyncio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.5-1.mga8"}]}],"bundled":10},{"source":"osv","ecosystem":"Mageia:9","package":"jupyter-notebook","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.4.12-1.1.mga9"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.0::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.0-18.el8.1"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-operator","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-pilot-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-pilot-discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.23.0-9.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-ratelimit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:service_mesh:2.1::el8","package":"servicemesh-proxy-wasm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.5-1.el8"}]}],"bundled":7},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"cockpit-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.2-1.el8ev"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_hypervisor:4.4::el8","package":"cockpit-ovirt-dashboard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.16.2-1.el8ev"}]}]},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-dbscripts","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-health-check-bundler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-restapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-cinderlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-imageio","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-ovirt-engine-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-setup-plugin-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-tools-backup","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-vmconsole-proxy-helper","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-webadmin-portal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-websocket-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"python3-ovirt-engine-lib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"rhvm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.5.2.4-0.1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-web-ui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.9.1-1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-log-collector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.7-2.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:rhev_manager:4.4:el8","package":"ovirt-engine-ui-extensions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.5-1.el8ev"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el7sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el7","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el7sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el8sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el8","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el8sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el9sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:red_hat_single_sign_on:7.6::el9","package":"rh-sso7-keycloak-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:18.0.6-1.redhat_00001.1.el9sso"}]}],"bundled":31},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.12-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.12-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-puma-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.12-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-rack-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.4-6.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-tzinfo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-base-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-common-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-exporter-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-fuse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-immutable-object-cache","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-immutable-object-cache-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mds-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mgr-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-mon-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-osd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-radosgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-resource-agents","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ceph-test-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephadm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephfs-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephfs-top","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephfs-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephfs2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephfs2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libcephsqlite-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librados2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libradospp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libradosstriper1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"libradosstriper1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librbd-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librbd1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librbd1-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librgw-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librgw2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"librgw2-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-ceph-argparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-ceph-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-cephfs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-cephfs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rados","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rados-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rgw","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"python3-rgw-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-fuse-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-mirror-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-nbd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"rbd-nbd-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:17.2.6-70.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"ansible-collection-ansible-posix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-1.3.el9ost"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:ceph_storage:6.1::el9","package":"cephadm-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.0-1.el9cp"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:npm","package":"moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-aikido.3"},{"fixed":"2.27.0-aikido.2"},{"fixed":"2.26.0-aikido.2"},{"fixed":"2.26.0-aikido.1"},{"fixed":"2.29.3-aikido.1"},{"fixed":"2.19.3-aikido.1"}]}]},{"source":"osv","ecosystem":"Root:npm","package":"@rootio/moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0-root.io.1"},{"fixed":"2.27.0-root.io.1"},{"fixed":"2.24.0-root.io.2"},{"fixed":"2.24.0-root.io.3"},{"fixed":"2.27.0-root.io.2"},{"fixed":"2.26.0-root.io.2"},{"fixed":"2.26.0-root.io.1"},{"fixed":"2.29.3-root.io.1"},{"fixed":"2.19.3-root.io.1"}]}]},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.3.43.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.2","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.3.43.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server 4.2","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.3.54.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"mgr-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.10-150300.2.9.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.4.12.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.19-150300.4.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.24-150300.4.29.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.18-150300.3.24.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.20-150300.4.24.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150300.3.21.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.29-150300.3.27.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"susemanager-tftpsync-recv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5-150300.3.6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.3.9.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"drools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150300.4.6.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"httpcomponents-asyncclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.1.4-150300.3.3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"image-sync-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1661440526.b08d95b-150300.3.3.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.3-150300.8.22.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"patterns-suse-manager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.4.12.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"py27-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000.3-150300.7.7.23.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"salt-netapi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.20.0-150300.3.9.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1661440526.b08d95b-150300.3.12.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.19-150300.4.27.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.12-150300.3.15.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.24-150300.4.29.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.18-150300.3.24.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.20-150300.4.24.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.41-150300.3.43.5"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.8-150300.3.12.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.29-150300.3.27.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"subscription-matcher","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.29-150300.6.12.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.37-150300.3.41.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-doc-indexes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.33.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.33.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.24-150300.3.27.3"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.27-150300.3.33.4"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.3.9.2"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-150400.3.9.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.3","package":"release-notes-susemanager-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-150400.3.9.3"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server 4.3","package":"release-notes-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.3.2-150400.3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"mgr-osad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.2.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.4.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.21-150300.4.33.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.26-150300.4.35.6"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.19-150300.3.27.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.22-150300.4.30.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.13-150300.3.24.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-proxy-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.11-150300.3.14.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.32-150300.3.36.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.3.6-150300.3.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Proxy Module 4.2","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"cobbler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.1.2-150300.5.19.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"drools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"7.17.0-150300.4.9.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"grafana-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.1-150300.3.9.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"inter-server-sync","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.2.7-150300.8.28.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"mgr-osad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.2.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"prometheus-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.7.0-150300.3.17.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"py27-compat-salt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3000.3-150300.7.7.29.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"rhnlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.7-150300.4.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"salt-netapi-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.21.0-150300.3.12.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"saltboot-formula","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.1676908681.e90e0b1-150300.3.15.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"smdba","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.11-0.150300.3.12.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacecmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.21-150300.4.33.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.13-150300.3.18.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-backend","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.26-150300.4.35.6"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.19-150300.3.27.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-client-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.22-150300.4.30.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.47-150300.3.58.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-search","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.3.15.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"spacewalk-web","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.32-150300.3.36.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"supportutils-plugin-susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.5-150300.3.9.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.40-150300.3.49.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-build-keys","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.3.6-150300.3.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-doc-indexes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.39.4"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-docs_en","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2-150300.12.39.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-schema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.27-150300.3.35.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"susemanager-sls","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.31-150300.3.43.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"uyuni-common-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.9-150300.3.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"virtual-host-gatherer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.24-150300.3.9.2"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Manager Server Module 4.2","package":"woodstox","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.4.2-150300.3.6.2"}]}],"bundled":5},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.6.6-2ubuntu2","1:2.6.9-1ubuntu1","1:2.6.12-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.10.6+dfsg-1","2.11.0+ds-1","2.11.0+ds-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.1+dfsg1-2ubuntu1","2.0+dfsg1-1","2.2+dfsg1-1","2.2+dfsg1-1build1","2.2+dfsg1-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.7.20-1","0.7.20+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3+dfsg-1","4.3.1+dfsg-1","4.4+dfsg-1","4.4.1+dfsg-1","4.4.2+dfsg-1","4.4.2+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.1+ds-1ubuntu0.1"}]}],"versions":["2.18.1+ds-1","2.19.1+ds-1","2.19.2+ds-1","2.19.3+ds-1","2.19.4+ds-1","2.20.1+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:2.6.17-1ubuntu1","1:2.6.18-1","1:2.6.19-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.27.3-1","1:1.27.4-1","1:1.27.4-2","1:1.27.4-3"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4+dfsg1-3","2.4+dfsg1-4","3.2+dfsg1-1","3.2+dfsg1-1ubuntu0.1~esm2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.1+dfsg-1","2.3.1+dfsg-1","2.3.2+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.14.36+ds1-1","0.14.38+ds1-1","0.14.43+ds1-5","0.14.43+ds1-6"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.8.2+dfsg-2","4.8.3+dfsg-1","4.9.1+dfsg-1","4.9.2+dfsg-1","4.9.4+dfsg-1","4.9.5+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0+ds-2ubuntu0.1"}]}],"versions":["2.24.0+ds-1","2.24.0+ds-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:3.7-1ubuntu1","1:3.7-1ubuntu2","1:3.7-2ubuntu1","1:3.8b-1","1:3.8b-1build2","1:3.8b-1build3","1:3.8b-1build4","1:3.8b-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.31.2-1ubuntu1","1:1.31.5-1","1:1.31.5-1ubuntu1","1:1.31.5-2","1:1.31.5-3","1:1.31.5-3ubuntu1","1:1.31.6-1","1:1.31.7-1","1:1.31.7-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.8+dfsg1-2.1build3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"omnidb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.16.0+ds-2","2.16.0+ds-2build1","2.16.0+ds-3","2.16.0+ds-4","2.16.0+ds-4build1","2.17.0+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ruby-momentjs-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.20.1-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.6+dfsg-1","2.3.6+dfsg-1build1","2.3.6+dfsg-1ubuntu1","3.0.0~0git20200408+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.1.4~ds1-4","1.1.4~ds1-4ubuntu1","1.1.4~ds1-4ubuntu1.1","1.1.4~ds1-4ubuntu1.2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.2+dfsg1-1","5.2.4+dfsg1-1","5.3.2+dfsg1-1","5.3.2+dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:4.4-1ubuntu1","1:4.8-1build2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.1+ds-3ubuntu0.2"}]}],"versions":["2.29.1+ds-2","2.29.1+ds-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+dfsg1-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"odoo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["14.0.0+dfsg.2-7","14.0.0+dfsg.3-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"omnidb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.3b+ds-2","3.0.3b+ds-2build1","3.0.3b+ds-3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby-momentjs-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.20.1-2"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.2.1+dfsg-1","3.4.2+dfsg-1","3.4.2+dfsg-2","3.5.0+dfsg-1","3.5.0+dfsg-2","3.5.1+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.7.1+dfsg1-2ubuntu1","5.8.1+dfsg1-2ubuntu1","5.8.2+dfsg1-1ubuntu1","5.8.3+dfsg1-1ubuntu1","5.8.3+dfsg1-1ubuntu1.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.35.3-1","1:1.35.4-1","1:1.35.5-1","1:1.35.5-1ubuntu1","1:1.35.5-1ubuntu2","1:1.35.5-1ubuntu3","1:1.35.6-1","1:1.35.6-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-2ubuntu0.1~esm1"}]}],"versions":["3.3.7-1","3.3.10-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.12.1~ds1-4","1.18.0~ds1-3","1.18.0~ds1-3ubuntu0.1","1.18.0~ds1-3ubuntu0.2","1.18.0~ds1-3ubuntu0.3","1.18.0~ds1-3ubuntu0.3+esm1","1.18.0~ds1-3ubuntu0.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.3-1","1:5.4-2","1:5.4-2build1","1:5.5-1","1:5.5-1ubuntu1","1:5.5-1.1","1:5.5-1.2","1:5.5-1.2build1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+dfsg1-1","5.2.1+dfsg1-1ubuntu1","5.2.1+dfsg1-1ubuntu3","5.2.1+dfsg1-1ubuntu4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"odoo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["16.0.0+dfsg.1-3","16.0.0+dfsg.2-1.1","16.0.0+dfsg.2-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"omnidb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.3b+ds-4"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby-momentjs-rails","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.20.1-2"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.2+dfsg-1","4.1.0+dfsg-1","4.2.2+dfsg-2","4.2.2+dfsg-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.2+dfsg1-1ubuntu1","6.4.3+dfsg1-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.39.4-2","1:1.39.5-1","1:1.39.6-1","1:1.39.7-1","1:1.39.7-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.13-1","3.3.13-1ubuntu0.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:24.04:LTS","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.19.2~ds1-3","1.27.2~ds4-1","1.27.2~ds4-1ubuntu0.24.04.1","1.27.2~ds4-1ubuntu0.24.04.2","1.27.2~ds4-1ubuntu0.24.04.2+esm1","1.27.2~ds4-1ubuntu0.24.04.3","1.27.2~ds4-1ubuntu0.24.04.3+esm1","1.27.2~ds4-1ubuntu0.24.04.3+esm2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.10-0.1","1:5.10-0.1build1","1:5.13-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.43.1+dfsg-1","1:1.43.1+dfsg-2","1:1.43.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ntopng","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.2.1+dfsg1-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"odoo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18.0.0+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"omnidb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.0.3b+ds-6build1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.15+ds-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.4.1+dfsg-2","4.5.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.29.2~ds1-1","1.29.5~ds1-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.7.2+dfsg1-1.1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.14-1build1","1:5.16-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.43.8+dfsg-2","1:1.43.9+dfsg-1","1:1.43.9+dfsg-1ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"odoo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18.0.0+dfsg-2build1","19.0.0+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.0.1+ds-1","4.0.4+ds-1","4.0.5+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.4+dfsg-4","5.0.4+dfsg-1","5.1.1+dfsg-1","5.1.3+dfsg-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.29.5~ds1-3","1.29.5~ds1-4"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.7.2+dfsg1-1.1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"gnucash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:5.13-1","1:5.13-1build1","1:5.14-1build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"mediawiki","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.43.3+dfsg-1","1:1.43.5+dfsg-1","1:1.43.6+dfsg-2","1:1.43.8+dfsg-1","1:1.43.8+dfsg-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"odoo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["18.0.0+dfsg-2","18.0.0+dfsg-2build1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["3.3.15+ds-2","4.0.1+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sabnzbdplus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.0+dfsg-1","4.5.4+dfsg-4"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"wordpress","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["6.7.2+dfsg1-1.1ubuntu1","6.7.2+dfsg1-1.1ubuntu2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:26.04:LTS","package":"syncthing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.29.5~ds1-2","1.29.5~ds1-3","1.29.5~ds1-3ubuntu0.26.04.1~esm1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.1+ds-1ubuntu0.1"}]}],"versions":["2.18.1+ds-1","2.19.1+ds-1","2.19.2+ds-1","2.19.3+ds-1","2.19.4+ds-1","2.20.1+ds-1"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.24.0+ds-2ubuntu0.1"}]}],"versions":["2.24.0+ds-1","2.24.0+ds-2"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"node-moment","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.29.1+ds-3ubuntu0.2"}]}],"versions":["2.29.1+ds-2","2.29.1+ds-3"],"bundled":2},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.2-2ubuntu0.1~esm1"}]}],"versions":["3.0.2-2"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:20.04:LTS","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.2.1-3ubuntu0.1~esm1"}]}],"versions":["3.2.1-2","3.2.1-3"],"bundled":3},{"source":"osv","ecosystem":"Ubuntu:Pro:22.04:LTS","package":"postfixadmin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.3.10-2ubuntu0.1~esm1"}]}],"versions":["3.3.7-1","3.3.10-2"],"bundled":3}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"moment","product":"moment"},{"vendor":"momentjs","product":"moment"}],"references":[{"url":"https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","tags":["x_transferred","Issue Tracking","Third Party Advisory","advisory","web","article","report"]},{"url":"https://github.com/moment/moment/pull/6015#issuecomment-1152961973","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://github.com/moment/moment/commit/9a3b5894f3d5d602948ac8a02e4ee528a49ca3a3","tags":["x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633/","tags":["x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO/","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20221014-0003/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/01/msg00035.html","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002/","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31129","tags":["advisory"]},{"url":"https://github.com/moment/moment/pull/6015/commits/4bbb9f3ccbe231de40207503f344fe5ce97584f4","tags":["web"]},{"url":"https://github.com/moment/moment/pull/6015/commits/bfd4f2375d5c1a2106246721d693a9611dddfbfe","tags":["web"]},{"url":"https://github.com/moment/moment/pull/6015/commits/dc0d180e90d8a84f7ff13572363330a22b3ea504","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241108-0002","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20221014-0003","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZMX5YHELQVCGKKQVFXIYOTBMN23YYSRO","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IWY24RJA3SBJGA5N4CU4VBPHJPPPJL5O","tags":["web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QIO6YNLTK2T7SPKDS4JEL45FANLNC2Q","tags":["web"]},{"url":"https://huntr.dev/bounties/f0952b67-f2ff-44a9-a9cd-99e0a87cb633","tags":["web"]},{"url":"https://github.com/advisories/GHSA-wc69-rhjr-hc9g"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31129.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-31129","tags":["advisory"]},{"url":"https://github.com/moment/moment","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2022-0323.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30789","tags":["report"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=30664","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-5585-1","tags":["advisory"]},{"url":"https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55","tags":["advisory"]},{"url":"https://github.com/jupyter/notebook/security/advisories/GHSA-v7vq-3x77-87vg","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/ORJX2LF6KMPIHP6B2P6KZIVKMLE3LVJ5/","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2024-0067.html","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-5559-1","tags":["advisory"]},{"url":"https://www.debian.org/lts/security/2023/dla-3295","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6272","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2072009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105075","tags":["report"]},{"url":"https://issues.redhat.com/browse/OSSM-1864","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6272.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24785","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24785","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24785","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-8hfj-j24r-96c4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31129","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6277","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064857","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077688","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2084085","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092793","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6277.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24675","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24675","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24675","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/oecdBNLOml8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24921","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24921","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24921","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/RP1hfrBYVuk","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-28327","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-28327","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-28327","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-29526","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-29526","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-29526","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/Y5qrqw_lWdU","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30629","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30629","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30629","tags":["advisory"]},{"url":"https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6392","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1793207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117558","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6392.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:6393","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1828406","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1850004","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1939284","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1944286","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1955388","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1974974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2034584","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092478","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097536","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097558","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097560","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104115","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107250","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109923","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6393.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11022","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11022","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11022","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gxr4-xjj5-5px2","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-11023","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-11023","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-11023","tags":["advisory"]},{"url":"https://blog.jquery.com/2020/04/10/jquery-3-5-0-released/","tags":["article"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-22096","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-22096","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-22096","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-23358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23358","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2806","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2806","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2806","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1043","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1601617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1701972","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073157","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2117506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135770","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138971","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141404","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2145194","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148496","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155681","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160585","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1043.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14040","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14040","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14040","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-14042","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-14042","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14042","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-11358","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-11358","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-11358","tags":["advisory"]},{"url":"https://blog.jquery.com/2019/04/10/jquery-3-4-0-released/","tags":["article"]},{"url":"https://www.drupal.org/sa-core-2019-006","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-35065","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-35065","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-35065","tags":["advisory"]},{"url":"https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1314294","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-44906","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-44906","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-44906","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-xvch-5gv4-984h","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1274","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1274","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1274","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-m4fv-gm5m-4725","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1438","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1438","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1438","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","tags":["advisory"]},{"url":"https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-2764","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-2764","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-2764","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-3916","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-3916","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-3916","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-4137","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-4137","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4137","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-37603","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-37603","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-37603","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40149","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40149","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40149","tags":["advisory"]},{"url":"https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40150","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40150","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40150","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42003","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45047","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45047","tags":["advisory"]},{"url":"https://www.mail-archive.com/dev@mina.apache.org/msg39312.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-45693","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-45693","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45693","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46175","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46175","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46175","tags":["advisory"]},{"url":"https://github.com/json5/json5/security/advisories/GHSA-9c47-m6qq-7p4h","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46363","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46363","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46363","tags":["advisory"]},{"url":"https://lists.apache.org/thread/pdzo1qgyplf4y523tnnzrcm7hoco3l8c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46364","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0091","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0091","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0091","tags":["advisory"]},{"url":"https://github.com/keycloak/keycloak/security/advisories/GHSA-v436-q368-hvgg","tags":["article"]},{"url":"https://github.com/keycloak/security/issues/27","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-0264","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-0264","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-0264","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1044","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1044.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1045","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1045.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1486","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110551","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1486.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24790","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30122","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-30122.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30123","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30123","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wq4h-7r42-5hrr","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31163","tags":["advisory"]},{"url":"https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:3623","tags":["advisory"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/6.1/html/release_notes/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1467648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1600995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1783271","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1794550","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1929760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1932764","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1975689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1991808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2004175","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2016949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2024444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2025815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2028058","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2036063","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053347","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064260","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2064265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2067709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2076709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2082666","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2092506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094052","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109224","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110290","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2111282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2111364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2111680","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2111751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2112309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2114835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127345","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127926","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129861","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133341","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133802","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136031","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138793","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138933","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142167","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142431","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2145104","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2146544","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2146546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147348","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149259","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151189","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153196","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158689","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168541","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172791","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175307","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180110","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181055","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182022","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182035","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185772","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186126","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186472","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2186774","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187265","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2187659","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188460","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189308","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2190412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2196920","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203098","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203747","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2204479","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207702","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2207718","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209300","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210698","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_3623.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4231","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4231","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4231","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223313-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1172705","tags":["report"]},{"url":"https://bugzilla.suse.com/1187028","tags":["report"]},{"url":"https://bugzilla.suse.com/1195455","tags":["report"]},{"url":"https://bugzilla.suse.com/1195895","tags":["report"]},{"url":"https://bugzilla.suse.com/1196729","tags":["report"]},{"url":"https://bugzilla.suse.com/1198168","tags":["report"]},{"url":"https://bugzilla.suse.com/1198489","tags":["report"]},{"url":"https://bugzilla.suse.com/1198738","tags":["report"]},{"url":"https://bugzilla.suse.com/1198903","tags":["report"]},{"url":"https://bugzilla.suse.com/1199372","tags":["report"]},{"url":"https://bugzilla.suse.com/1199659","tags":["report"]},{"url":"https://bugzilla.suse.com/1199913","tags":["report"]},{"url":"https://bugzilla.suse.com/1199950","tags":["report"]},{"url":"https://bugzilla.suse.com/1200276","tags":["report"]},{"url":"https://bugzilla.suse.com/1200296","tags":["report"]},{"url":"https://bugzilla.suse.com/1200480","tags":["report"]},{"url":"https://bugzilla.suse.com/1200532","tags":["report"]},{"url":"https://bugzilla.suse.com/1200573","tags":["report"]},{"url":"https://bugzilla.suse.com/1200591","tags":["report"]},{"url":"https://bugzilla.suse.com/1200629","tags":["report"]},{"url":"https://bugzilla.suse.com/1201142","tags":["report"]},{"url":"https://bugzilla.suse.com/1201189","tags":["report"]},{"url":"https://bugzilla.suse.com/1201210","tags":["report"]},{"url":"https://bugzilla.suse.com/1201220","tags":["report"]},{"url":"https://bugzilla.suse.com/1201224","tags":["report"]},{"url":"https://bugzilla.suse.com/1201527","tags":["report"]},{"url":"https://bugzilla.suse.com/1201606","tags":["report"]},{"url":"https://bugzilla.suse.com/1201607","tags":["report"]},{"url":"https://bugzilla.suse.com/1201626","tags":["report"]},{"url":"https://bugzilla.suse.com/1201753","tags":["report"]},{"url":"https://bugzilla.suse.com/1201913","tags":["report"]},{"url":"https://bugzilla.suse.com/1201918","tags":["report"]},{"url":"https://bugzilla.suse.com/1202142","tags":["report"]},{"url":"https://bugzilla.suse.com/1202272","tags":["report"]},{"url":"https://bugzilla.suse.com/1202464","tags":["report"]},{"url":"https://bugzilla.suse.com/1202724","tags":["report"]},{"url":"https://bugzilla.suse.com/1202728","tags":["report"]},{"url":"https://bugzilla.suse.com/1203287","tags":["report"]},{"url":"https://bugzilla.suse.com/1203288","tags":["report"]},{"url":"https://bugzilla.suse.com/1203449","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-41411","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-42740","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2021-43138","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31129","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223314-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20223761-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1191857","tags":["report"]},{"url":"https://bugzilla.suse.com/1195624","tags":["report"]},{"url":"https://bugzilla.suse.com/1197027","tags":["report"]},{"url":"https://bugzilla.suse.com/1199726","tags":["report"]},{"url":"https://bugzilla.suse.com/1201260","tags":["report"]},{"url":"https://bugzilla.suse.com/1201589","tags":["report"]},{"url":"https://bugzilla.suse.com/1201788","tags":["report"]},{"url":"https://bugzilla.suse.com/1202271","tags":["report"]},{"url":"https://bugzilla.suse.com/1202367","tags":["report"]},{"url":"https://bugzilla.suse.com/1202455","tags":["report"]},{"url":"https://bugzilla.suse.com/1202602","tags":["report"]},{"url":"https://bugzilla.suse.com/1202729","tags":["report"]},{"url":"https://bugzilla.suse.com/1202805","tags":["report"]},{"url":"https://bugzilla.suse.com/1202899","tags":["report"]},{"url":"https://bugzilla.suse.com/1203026","tags":["report"]},{"url":"https://bugzilla.suse.com/1203049","tags":["report"]},{"url":"https://bugzilla.suse.com/1203056","tags":["report"]},{"url":"https://bugzilla.suse.com/1203169","tags":["report"]},{"url":"https://bugzilla.suse.com/1203385","tags":["report"]},{"url":"https://bugzilla.suse.com/1203406","tags":["report"]},{"url":"https://bugzilla.suse.com/1203422","tags":["report"]},{"url":"https://bugzilla.suse.com/1203478","tags":["report"]},{"url":"https://bugzilla.suse.com/1203484","tags":["report"]},{"url":"https://bugzilla.suse.com/1203564","tags":["report"]},{"url":"https://bugzilla.suse.com/1203585","tags":["report"]},{"url":"https://bugzilla.suse.com/1203611","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0860","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20230592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1188191","tags":["report"]},{"url":"https://bugzilla.suse.com/1195979","tags":["report"]},{"url":"https://bugzilla.suse.com/1200096","tags":["report"]},{"url":"https://bugzilla.suse.com/1200169","tags":["report"]},{"url":"https://bugzilla.suse.com/1201476","tags":["report"]},{"url":"https://bugzilla.suse.com/1201893","tags":["report"]},{"url":"https://bugzilla.suse.com/1202093","tags":["report"]},{"url":"https://bugzilla.suse.com/1202217","tags":["report"]},{"url":"https://bugzilla.suse.com/1203521","tags":["report"]},{"url":"https://bugzilla.suse.com/1203532","tags":["report"]},{"url":"https://bugzilla.suse.com/1203588","tags":["report"]},{"url":"https://bugzilla.suse.com/1203633","tags":["report"]},{"url":"https://bugzilla.suse.com/1203698","tags":["report"]},{"url":"https://bugzilla.suse.com/1203826","tags":["report"]},{"url":"https://bugzilla.suse.com/1203884","tags":["report"]},{"url":"https://bugzilla.suse.com/1203886","tags":["report"]},{"url":"https://bugzilla.suse.com/1204029","tags":["report"]},{"url":"https://bugzilla.suse.com/1204032","tags":["report"]},{"url":"https://bugzilla.suse.com/1204186","tags":["report"]},{"url":"https://bugzilla.suse.com/1204208","tags":["report"]},{"url":"https://bugzilla.suse.com/1204330","tags":["report"]},{"url":"https://bugzilla.suse.com/1204437","tags":["report"]},{"url":"https://bugzilla.suse.com/1204517","tags":["report"]},{"url":"https://bugzilla.suse.com/1204519","tags":["report"]},{"url":"https://bugzilla.suse.com/1204541","tags":["report"]},{"url":"https://bugzilla.suse.com/1204651","tags":["report"]},{"url":"https://bugzilla.suse.com/1204699","tags":["report"]},{"url":"https://bugzilla.suse.com/1204712","tags":["report"]},{"url":"https://bugzilla.suse.com/1204879","tags":["report"]},{"url":"https://bugzilla.suse.com/1205012","tags":["report"]},{"url":"https://bugzilla.suse.com/1205040","tags":["report"]},{"url":"https://bugzilla.suse.com/1205523","tags":["report"]},{"url":"https://bugzilla.suse.com/1205663","tags":["report"]},{"url":"https://bugzilla.suse.com/1205759","tags":["report"]},{"url":"https://bugzilla.suse.com/1205920","tags":["report"]},{"url":"https://bugzilla.suse.com/1205943","tags":["report"]},{"url":"https://bugzilla.suse.com/1206146","tags":["report"]},{"url":"https://bugzilla.suse.com/1206168","tags":["report"]},{"url":"https://bugzilla.suse.com/1206249","tags":["report"]},{"url":"https://bugzilla.suse.com/1206375","tags":["report"]},{"url":"https://bugzilla.suse.com/1206470","tags":["report"]},{"url":"https://bugzilla.suse.com/1206613","tags":["report"]},{"url":"https://bugzilla.suse.com/1206817","tags":["report"]},{"url":"https://bugzilla.suse.com/1206861","tags":["report"]},{"url":"https://bugzilla.suse.com/1206932","tags":["report"]},{"url":"https://bugzilla.suse.com/1206933","tags":["report"]},{"url":"https://bugzilla.suse.com/1206963","tags":["report"]},{"url":"https://bugzilla.suse.com/1206979","tags":["report"]},{"url":"https://bugzilla.suse.com/1206981","tags":["report"]},{"url":"https://bugzilla.suse.com/1207141","tags":["report"]},{"url":"https://bugzilla.suse.com/1208335","tags":["report"]},{"url":"https://bugzilla.suse.com/1208418","tags":["report"]},{"url":"https://bugzilla.suse.com/1208499","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-1415","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-40152","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-31129","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6550-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-24785","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2022-29221","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2023-28447","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2022-31129","title":"Inefficient Regular Expression Complexity in moment","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","status":"published","published":"2022-07-06T00:00:00Z","modified":"2025-11-03T21:46:17.025Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-6433","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","status":"published","published":"2022-07-06T00:00:00Z","modified":"2025-11-03T21:46:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T19:49:31.25882Z"}],"ghsa":[{"id":"GHSA-wc69-rhjr-hc9g","title":"Moment.js vulnerable to Inefficient Regular Expression Complexity","description":"### Impact\n\n* using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs\n* noticeable slowdown is observed with inputs above 10k characters\n* users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks\n\n### Patches\nThe problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking.\n\n### Workarounds\nIn general, given the proliferation of ReDoS attacks, it makes sense to limit the length of the user input to something sane, like 200 characters or less. I haven't seen legitimate cases of date-time strings longer than that, so all moment users who do pass a user-originating string to constructor are encouraged to apply such a rudimentary filter, that would help with this but also most future ReDoS vulnerabilities.\n\n### References\nThere is an excellent writeup of the issue here: https://github.com/moment/moment/pull/6015#issuecomment-1152961973=\n\n### Details\nThe issue is rooted in the code that removes legacy comments (stuff inside parenthesis) from strings during rfc2822 parsing. `moment(\"(\".repeat(500000))` will take a few minutes to process, which is unacceptable.","status":"published","published":"2022-07-06T18:38:49Z","modified":"2025-11-04T16:39:38Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400","CWE-1333"],"updated_at":"2026-11-02T14:39:05.278442Z"}],"nvd":[{"id":"CVE-2022-31129","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","status":"published","published":"2022-07-06T18:15:19.57Z","modified":"2026-06-17T04:44:51.93Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-400","CWE-1333"],"updated_at":"2026-11-02T14:07:22.966735Z"}],"osv":[{"id":"CVE-2022-31129","title":"Inefficient Regular Expression Complexity in moment","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","status":"published","published":"2022-07-06T00:00:00Z","modified":"2026-10-28T02:30:22.334216491Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-31129","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","status":"published","published":"2022-07-06T18:15:19.57Z","modified":"2026-11-03T08:01:28.374050339Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-wc69-rhjr-hc9g","title":"Moment.js vulnerable to Inefficient Regular Expression Complexity","description":"### Impact\n\n* using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs\n* noticeable slowdown is observed with inputs above 10k characters\n* users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks\n\n### Patches\nThe problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking.\n\n### Workarounds\nIn general, given the proliferation of ReDoS attacks, it makes sense to limit the length of the user input to something sane, like 200 characters or less. I haven't seen legitimate cases of date-time strings longer than that, so all moment users who do pass a user-originating string to constructor are encouraged to apply such a rudimentary filter, that would help with this but also most future ReDoS vulnerabilities.\n\n### References\nThere is an excellent writeup of the issue here: https://github.com/moment/moment/pull/6015#issuecomment-1152961973=\n\n### Details\nThe issue is rooted in the code that removes legacy comments (stuff inside parenthesis) from strings during rfc2822 parsing. `moment(\"(\".repeat(500000))` will take a few minutes to process, which is unacceptable.","status":"published","published":"2022-07-06T18:38:49Z","modified":"2026-09-10T03:49:45.131249858Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-1333","CWE-400"],"updated_at":"2026-11-02T15:46:58.401149Z"},{"id":"RHSA-2022:6272","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.11 security update","status":"published","published":"2024-09-30T14:23:52Z","modified":"2026-10-13T10:03:20Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6277","title":"Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.5 security update","status":"published","published":"2024-09-30T14:24:07Z","modified":"2026-10-15T10:03:04Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6392","title":"Red Hat Security Advisory: RHV RHEL Host (ovirt-host) [ovirt-4.5.2] security update","status":"published","published":"2024-09-30T14:25:36Z","modified":"2026-10-13T10:03:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2022:6393","title":"Red Hat Security Advisory: RHV Manager (ovirt-engine) [ovirt-4.5.2] bug fix and security update","status":"published","published":"2024-09-30T14:25:44Z","modified":"2026-10-13T10:03:22Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:09.62945Z"},{"id":"RHSA-2023:1043","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 7","status":"published","published":"2024-09-30T16:32:34Z","modified":"2026-10-13T10:03:51Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1044","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 8","status":"published","published":"2024-09-30T16:32:14Z","modified":"2026-10-13T10:03:52Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1045","title":"Red Hat Security Advisory: Red Hat Single Sign-On 7.6.2 security update on RHEL 9","status":"published","published":"2024-09-30T16:31:49Z","modified":"2026-10-13T10:03:53Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:1486","title":"Red Hat Security Advisory: Red Hat Gluster Storage web-admin-build security update","status":"published","published":"2024-09-30T14:42:50Z","modified":"2026-10-13T10:03:57Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:3623","title":"Red Hat Security Advisory: Red Hat Ceph Storage 6.1 security and bug fix update","status":"published","published":"2024-09-30T14:47:06Z","modified":"2026-10-13T10:04:28Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:11.154197Z"},{"id":"ROOT-APP-NPM-CVE-2022-31129","title":"CVE-2022-31129 in moment - Patched by Root","description":"Root has patched CVE-2022-31129 in the moment package for Root:npm. Multiple fixed versions available.","status":"published","published":"2026-11-06T09:36:05Z","modified":"2026-11-06T10:15:03.03665733Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-06T10:38:22.758306Z"},{"id":"UBUNTU-CVE-2022-31129","description":"moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected versions of moment were found to use an inefficient parsing algorithm. Specifically using string-to-date parsing in moment (more specifically rfc2822 parsing, which is tried by default) has quadratic (N^2) complexity on specific inputs. Users may notice a noticeable slowdown is observed with inputs above 10k characters. Users who pass user-provided strings without sanity length checks to moment constructor are vulnerable to (Re)DoS attacks. The problem is patched in 2.29.4, the patch can be applied to all affected versions with minimal tweaking. Users are advised to upgrade. Users unable to upgrade should consider limiting date lengths accepted from user input.","status":"published","published":"2022-07-06T18:15:00Z","modified":"2026-10-17T12:56:21.821482702Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"CLSA-2026-1774916720","title":"TuxCare security update for moment (2 CVEs)","description":"TuxCare rebuilt moment to address 2 CVEs. Fixed in 2.24.0-tuxcare.1.","status":"published","published":"2026-08-04T14:52:17Z","modified":"2026-10-15T09:47:48.845040052Z","updated_at":"2026-11-02T15:43:43.621843Z"},{"id":"CLSA-2026-1792432046","title":"TuxCare security update for moment (2 CVEs)","description":"TuxCare rebuilt moment to address 2 CVEs. Fixed in 2.22.2-tuxcare.1.","status":"published","published":"2026-10-19T17:47:26Z","modified":"2026-10-19T19:15:24.74027901Z","updated_at":"2026-11-02T15:43:54.119956Z"},{"id":"DLA-3295-1","title":"node-moment - security update","status":"published","published":"2023-01-31T00:00:00Z","modified":"2026-03-09T01:18:49.76564Z","updated_at":"2026-11-02T15:46:11.734021Z"},{"id":"MGASA-2022-0323","title":"Updated jupyter-notebook packages fix security vulnerability","description":"It was discovered that Jupyter Notebook incorrectly handled certain\nnotebooks. An attacker could possibly use this issue of lack of Content\nSecurity Policy in Nbconvert to perform cross-site scripting (XSS) attacks\non the notebook server. (CVE-2018-19351)\n\nIt was discovered that Jupyter Notebook incorrectly handled certain SVG\ndocuments. An attacker could possibly use this issue to perform cross-site\nscripting (XSS) attacks. (CVE-2018-21030)\n\nIt was discovered that Jupyter Notebook incorrectly filtered certain URLs\non the login page. An attacker could possibly use this issue to perform\nopen-redirect attack. (CVE-2019-10255)\n\nIt was discovered that Jupyter Notebook had an incomplete fix for\nCVE-2019-10255. An attacker could possibly use this issue to perform\nopen-redirect attack using empty netloc. (CVE-2019-10856)\n\nIt was discovered that Jupyter Notebook incorrectly handled the inclusion\nof remote pages on Jupyter server. An attacker could possibly use this\nissue to perform cross-site script inclusion (XSSI) attacks.\n(CVE-2019-9644)\n\nIt was discovered that Jupyter Notebook incorrectly filtered certain URLs\nto a notebook. An attacker could possibly use this issue to perform\nopen-redirect attack. (CVE-2020-26215)\n\nIt was discovered that Jupyter Notebook server access logs were not\nprotected. An attacker having access to the notebook server could possibly\nuse this issue to get access to steal sensitive information such as\nauth/cookies. (CVE-2022-24758)\n\nIt was discovered that Jupyter Notebook incorrectly configured hidden\nfiles on the server. An authenticated attacker could possibly use this\nissue to see unwanted sensitive hidden files from the server which may\nresult in getting full access to the server. (CVE-2022-29238)\n\nMoment.js: Path traversal  in moment.locale (CVE-2022-24785)\n\nmoment: inefficient parsing algorithim resulting in DoS (CVE-2022-31129)\n","status":"published","published":"2022-09-10T20:26:43Z","modified":"2026-04-16T04:43:57.344577826Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"MGASA-2024-0067","title":"Updated jupyter-notebook packages fix security vulnerabilities","description":"Path traversal in moment.locale. (CVE-2022-24785)\nInefficient parsing algorithim resulting in DoS. (CVE-2022-31129)\n","status":"published","published":"2024-03-16T01:42:48Z","modified":"2026-04-16T04:40:38.526390717Z","updated_at":"2026-11-02T15:49:42.684501Z"},{"id":"SUSE-SU-2022:3313-1","title":"Security update for release-notes-susemanager, release-notes-susemanager-proxy","description":"This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues:\n\nRelease notes for SUSE Manager:\n\n- Update to SUSE:Manager 4.2.9\n  * Notification about SUSE Manager end-of-life has been added\n  * CVEs fixed: CVE-2021-43138, CVE-2021-42740, CVE-2022-31129, CVE-2021-41411\n  * Bugs mentioned:\n    bsc#1172705, bsc#1187028, bsc#1195455, bsc#1195895, bsc#1196729\n    bsc#1198168, bsc#1198489, bsc#1198738, bsc#1198903, bsc#1199372\n    bsc#1199659, bsc#1199913, bsc#1199950, bsc#1200276, bsc#1200296\n    bsc#1200480, bsc#1200532, bsc#1200573, bsc#1200591, bsc#1200629\n    bsc#1201142, bsc#1201189, bsc#1201210, bsc#1201220, bsc#1201224\n    bsc#1201527, bsc#1201606, bsc#1201607, bsc#1201626, bsc#1201753\n    bsc#1201913, bsc#1201918, bsc#1202142, bsc#1202272, bsc#1202464\n    bsc#1202728, bsc#1203287, bsc#1203288, bsc#1203449\n\nRelease notes for SUSE Manager Proxy:\n\n- Update to SUSE Manager 4.2.9\n  * CVEs fixed: CVE-2021-43138, CVE-2021-42740, CVE-2022-31129\n  * Bugs mentioned:\n    bsc#1198168, bsc#1198903, bsc#1199659, bsc#1200480, bsc#1200591\n    bsc#1201142, bsc#1202142, bsc#1202724\n","status":"published","published":"2022-09-19T15:37:27Z","modified":"2026-02-04T03:49:16.811481Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3314-1","title":"Security update for SUSE Manager Server 4.2","description":"This update fixes the following issues:\n\ndrools:\n\n- CVE-2021-41411: XML External Entity injection in KieModuleModelImpl.java. (bsc#1200629)\n\nhttpcomponents-asyncclient:\n\n- Provide maven metadata needed by other packages to build\n\nimage-sync-formula:\n\n- Update to version 0.1.1661440526.b08d95b\n  * Add option to sort boot images by version (bsc#1196729)\n\ninter-server-sync:\n\n- Version 0.2.3\n  * Compress exported sql data #16631\n  * Add gzip dependency to decompress data file during import process\n\npatterns-suse-manager:\n\n- Strictly require OpenJDK 11 (bsc#1202142) \n\npy27-compat-salt:\n\n- Add support for gpgautoimport in zypperpkg module\n- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)\n- Add support for name, pkgs and diff_attr parameters to upgrade\n  function for zypper and yum (bsc#1198489)\n- Unify logic on using multiple requisites and add onfail_all (bsc#1198738)\n- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)\n\nsalt-netapi-client:\n\n- Declare the LICENSE file as license and not doc\n- Adapted for Enterprise Linux 9.\n- Version 0.20.0\n  * See: https://github.com/SUSE/salt-netapi-client/releases/tag/v0.20.0\n\nsaltboot-formula:\n\n- Update to version 0.1.1661440526.b08d95b\n  * Fallback to local boot if the configured image is not synced\n  * improve image url modifications - preparation for ftp/http changes\n\nspacecmd:\n\n- Version 4.2.19-1\n  * Process date values in spacecmd api calls (bsc#1198903)\n  * Show correct help on calling kickstart_importjson with no arguments\n  * Fix tracebacks on spacecmd kickstart_export (bsc#1200591)\n\nspacewalk-admin:\n\n- Version 4.2.12-1\n  * Add --help option to mgr-monitoring-ctl\n\nspacewalk-backend:\n\n- Version 4.2.24-1\n  * Make reposync use the configured http proxy with mirrorlist (bsc#1198168)\n  * Revert proxy listChannels token caching pr#4548\n  * cleanup leftovers from removing unused xmlrpc endpoint\n\nspacewalk-certs-tools:\n\n- Version 4.2.18-1\n  * traditional stack bootstrap: install product packages (bsc#1201142)\n\nspacewalk-client-tools:\n\n- Version 4.2.20-1\n  * Update translation strings\n\nspacewalk-java:\n\n- Version 4.2.41-1\n  * Fixed date format on scheduler related messages (bsc#1195455)\n  * Support inherited values for kernel options from Cobbler API (bsc#1199913)\n  * Add channel availability check for product migration (bsc#1200296)\n  * Check if system has all formulas correctly assigned (bsc#1201607)\n  * Remove group formula assignments and data on group delete (bsc#1201606)\n  * Fix sync for external repositories (bsc#1201753)\n  * fix state.apply result parsing in test mode (bsc#1201913)\n  * Reduce the length of image channel URL (bsc#1201220)\n  * Calculate dependencies between cloned channels of vendor channels (bsc#1201626)\n  * fix symlinks pointing to ongres-stringprep\n  * Modify parameter type when communicating with the search server (bsc#1187028)\n  * Fix initial profile and build host on Image Build page (bsc#1199659)\n  * Fix the confirm message on the refresh action by adding a link\n    to pending actions on it (bsc#1172705)\n  * require new salt-netapi-client version\n  * Clean grub2 reinstall entry in autoyast snippet (bsc#1199950)\n\nspacewalk-search:\n\n- Version 4.2.8-1\n  * Add methods to handle session id as String\n\nspacewalk-web:\n\n- Version 4.2.29-1\n  * CVE-2021-43138: Obtain privileges via the `mapValues()` method. (bsc#1200480)\n  * CVE-2021-42740: Command injection in the shell-quote package. (bsc#1203287) \n  * CVE-2022-31129: Denial-of-Service moment: inefficient parsing algorithm (bsc#1203288)\n  * Fix table header layout for unselectable tables\n  * Fix initial profile and build host on Image Build page (bsc#1199659)\n\nsubscription-matcher:\n\n- Added Guava maximum version requirement.\n\nsusemanager:\n    \n- Version 4.2.37-1\n  * mark new dependencies for python-py optional in bootstrap repo to fix generation for older service packs \n    (bsc#1203449)\n- Version 4.2.36-1\n  * add missing packages on SLES 15\n  * remove server-migrator.sh from SUSE Manager installations (bsc#1202728)\n  * mgr-create-bootstrap-repo: flush directory also when called for a specific label (bsc#1200573)\n  * add missing packages on SLES 12 SP5 bootstrap repo (bsc#1201918)\n  * remove python-tornado from bootstrap repo, since no longer required for salt version \u003e= 3000\n  * add openSUSE 15.4 product (bsc#1201527)\n  * add clients tool product to generate bootstrap repo on openSUSE 15.x (bsc#1201189)\n\nsusemanager-doc-indexes:\n\n- Documented mandatory channels in the Disconnected Setup chapter of the\n  Administration Guide (bsc#1202464)\n- Documented how to onboard Ubuntu clients with the Salt bundle as a\n  regular user\n- Documented how to onboard Debian clients with the Salt bundle or plain Salt\n  as a regular user\n- Fixed the names of updates channels for Leap\n- Fixed errors in OpenSCAP chapter of Administration Guide\n- Added exact command to create the bootstrap repo for Salt bundle and about how to disable salt-thin\n- Removed CentOS 8 from the list of supported client systems\n- Extend the notes about using noexec option for /tmp and /var/tmp (bsc#1201210)\n- Reverted single snippet change for two separate books\n- Added extend Salt Bundle functionality with Python packages using pip\n- Add missing part of the description to enable optional support of the Salt Bundle with Salt SSH\n- Added exact command to create the bootstrap repo for salt bundle and about how to disable salt-thin\n- Salt Configuration Modules are no longer Technology Preview in Salt Guide.\n- Fixed Ubuntu 18 Client registration in Client Configuration Guide (bsc#1201224)\n- Added ports 1232 and 1233 in the Ports section of the Installation and\n  Upgrade Guide; required for Salt SSH Push (bsc#1200532)\n- In the Custom Channel section of the Administration Guide add a note\n  about synchronizing repositories regularly.\n- Removed SUSE Linux Enterprise 11 from the list of supported client systems\n\nsusemanager-docs_en:\n\n- Documented mandatory channels in the Disconnected Setup chapter of the\n  Administration Guide (bsc#1202464)\n- Documented how to onboard Ubuntu clients with the Salt bundle as a\n  regular user\n- Documented how to onboard Debian clients with the Salt bundle or plain Salt\n  as a regular user\n- Fixed the names of updates channels for Leap\n- Fixed errors in OpenSCAP chapter of Administration Guide\n- Added exact command to create the bootstrap repo for Salt bundle and about how to disable salt-thin\n- Removed CentOS 8 from the list of supported client systems\n- Extend the notes about using noexec option for /tmp and /var/tmp (bsc#1201210)\n- Reverted single snippet change for two separate books\n- Added extend Salt Bundle functionality with Python packages using pip\n- Add missing part of the description to enable optional support of the Salt Bundle with Salt SSH\n- Added exact command to create the bootstrap repo for salt bundle and about how to disable salt-thin\n- Salt Configuration Modules are no longer Technology Preview in Salt Guide.\n- Fixed Ubuntu 18 Client registration in Client Configuration Guide (bsc#1201224)\n- Added ports 1232 and 1233 in the Ports section of the Installation and\n  Upgrade Guide; required for Salt SSH Push (bsc#1200532)\n- In the Custom Channel section of the Administration Guide add a note\n  about synchronizing repositories regularly.\n- Removed SUSE Linux Enterprise 11 from the list of supported client systems\n\nsusemanager-schema:\n\n- Version 4.2.24-1\n  * Fix migration of image actions (bsc#1202272)\n\nsusemanager-sls:\n\n- Version 4.2.27-1\n  * Copy grains file with util.mgr_switch_to_venv_minion state apply\n  * Remove the message 'rpm: command not found' on using Salt SSH\n    with Debian based systems which has no Salt Bundle\n  * Prevent possible tracebacks on calling module.run from mgrcompat\n    by setting proper globals with using LazyLoader\n  * Fix deploy of SLE Micro CA Certificate (bsc#1200276)\n\nuyuni-common-libs:\n\n- Version 4.2.7-1\n  * Do not allow creating path if nonexistent user or group in fileutils.\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2022-09-19T15:38:45Z","modified":"2026-02-04T04:02:47.076962Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2022:3761-1","title":"Security update for release-notes-susemanager, release-notes-susemanager-proxy","description":"This update for release-notes-susemanager, release-notes-susemanager-proxy fixes the following issues:\n\nRelease notes for SUSE Manager:\n\n- Update to SUSE Manager 4.3.2\n  * Containerized proxy and RBS are now fully supported\n  * HTTP API is now fully supported\n  * Ubuntu 22.04 is now supported as a client\n  * Cobbler has been upgraded to version 3.3.3 which also includes building ISOs with UEFI support\n  * pip support has been added for the Salt Bundle  \n  * Prometheus exporter for Apache has been upgraded to 0.10.0\n  * CVEs fixed: CVE-2021-41411, CVE-2021-42740, CVE-2021-43138, CVE-2022-0860, CVE-2022-31129\n  * Bugs mentioned:\n    bsc#1191857, bsc#1195624, bsc#1196729, bsc#1197027, bsc#1198168\n    bsc#1198903, bsc#1199726, bsc#1200480, bsc#1200573, bsc#1200629\n    bsc#1201210, bsc#1201220, bsc#1201260, bsc#1201626, bsc#1201753\n    bsc#1201788, bsc#1201913, bsc#1201918, bsc#1202271, bsc#1202272\n    bsc#1202367, bsc#1202455, bsc#1202464, bsc#1202602, bsc#1202728\n    bsc#1202729, bsc#1202805, bsc#1202899, bsc#1203026, bsc#1203049\n    bsc#1203056, bsc#1203169, bsc#1203287, bsc#1203288, bsc#1203385\n    bsc#1203406, bsc#1203422, bsc#1203449, bsc#1203478, bsc#1203484\n    bsc#1203564, bsc#1203585, bsc#1203611 \n\nRelease notes for SUSE Manager Proxy:\n\n- Update to SUSE Manager 4.3.2\n  * Containerized proxy and RBS are now fully supported\n  * CVEs fixed: CVE-2021-42740, CVE-2021-43138, CVE-2022-31129\n  * Bugs mentioned:\n    bsc#1198168, bsc#1198903, bsc#1200480, bsc#1201589, bsc#1201788\n    bsc#1203287, bsc#1203288, bsc#1203585 \n","status":"published","published":"2022-10-26T08:58:54Z","modified":"2026-02-04T02:31:49.884657Z","updated_at":"2026-11-02T15:53:51.440565Z"},{"id":"SUSE-SU-2023:0592-1","title":"Security update for SUSE Manager Server 4.2","description":"This update fixes the following issues:\n\ncobbler:\n\n- Fix improper authorization (bsc#1197027, CVE-2022-0860)\n- Prevent error when starting up logrotate.service (bsc#1188191)\n\ndrools:\n\n- Deserialization of Untrusted Data: unsafe data deserialization\n  in DroolsStreamUtils.java (bsc#1204879, CVE-2022-1415)\n\ngrafana-formula:\n\n- Version 0.8.1\n  * Fix Uyuni/SUMA dashboard names\n- Version 0.8.0\n  * Set dashboard names depending on project\n  * Update dashboards to use new JSON schema\n  * Fix PostgreSQL dashboard queries\n  * Migrate deprecated panels to their current replacements\n- Version 0.7.1\n  * Fix default password field description (bsc#1203698)\n  * Do not require default admin and password fields\n\ninter-server-sync:\n\n- Version 0.2.7\n  * Do not update pillars table if it does not exists like in 4.2\n- Version 0.2.6\n  * Export package extra tags for complete debian repo metatdata (bsc#1206375)\n  * Replace URLs in OS Images pillars when exporting and importing images\n- Version 0.2.5 \n  * Correct error when importing without debug log level (bsc#1204699)\n\nmgr-osad:\n\n- Version 4.2.9-1\n  * Updated logrotate configuration (bsc#1206470)\n\nprometheus-formula:\n\n- Version 0.7.0\n  * Switch from basic authentication to TLS certificate client\n    authentication for Blackbox exporter\n  * Fix scheme label in clients targets configration\n  * Add README.md\n\npy27-compat-salt:\n\n- Ignore extend declarations from excluded SLS files (bsc#1203886)\n- Enhance capture of error messages for Zypper calls in zypperpkg module\n\nrhnlib:\n\n- Version 4.2.7-1\n  * Don't get stuck at the end of SSL transfers (bsc#1204032)\n\nsaltboot-formula:\n\n- Update to version 0.1.1676908681.e90e0b1\n  * Add failsafe stop file when salt-minion does not stop (bsc#1208418)\n  * Support salt bundle (bsc#1208499)\n\nsalt-netapi-client:\n\n- Version 0.21.0\n  * See: https://github.com/SUSE/salt-netapi-client/releases/tag/v0.21.0\n- Add transactional_update module\n- Improve logging when creating salt exception\n\nsmdba:\n\n- Version 1.7.11\n  * fix config update from wal_keep_segments to wal_keep_size for\n    newer postgresql versions (bsc#1204519)\n\nspacecmd:\n\n- Version 4.2.21-1\n  * Prevent string api parameters to be parsed as dates if not in\n    ISO-8601 format (bsc#1205759)\n  * Add python-dateutil dependency, required to process date values in\n    spacecmd api calls\n  * Correctly understand 'ssm' keyword on scap scheduling\n  * Fix dict_keys not supporting indexing in systems_setconfigchannelorger\n\nspacewalk-admin:\n\n- Version 4.2.13-1\n  * Generate uyuni_roster.conf with salt-secrets-config (bsc#1200096)\n\nspacewalk-backend:\n\n- Version 4.2.26-1\n  * Fix reposync error about missing 'content-type' key when syncing certain channels\n  * Compute headers as list of two-tuples to be used by url grabber (bsc#1205523)\n  * Updated logrotate configuration (bsc#1206470)\n  * Add 'octet-stream' to accepted content-types for reposync mirrorlists\n  * Exclude invalid mirror urls for reposync (bsc#1203826)\n  * do not fetch mirrorlist when a file url is given\n  * Keep older module metadata files in database (bsc#1201893)\n  * Removed the activation keys report from the debug information\n\nspacewalk-certs-tools:\n\n- Version 4.2.19-1\n  * some i18n functions moved to new module which needs to be loaded\n    (bsc#1201142)\n  * Generated bootstrap scripts installs all needed Salt 3004 dependencies\n    for Ubuntu 18.04 (bsc#1204517)\n\nspacewalk-client-tools:\n\n- Version 4.2.22-1\n  * Update translation strings\n\nspacewalk-java:\n\n- Version 4.2.47-1\n  * Use uyuni roster salt module instead of flat roster files (bsc#1200096)\n- Version 4.2.46-1\n  * Fix registration with proxy and tunnel SSH (bsc#1200096)\n- Version 4.2.45-1\n  * Add 'none' matcher to CLM AppStream filters (bsc#1206817)\n  * Improve logs when sls action chain file is missing\n  * Do not forward ssh command if proxy and tunnel are present (bsc#1200096)\n  * Fix not being able to delete CLM environment if there are custom child\n    channels that where not built by the environment (bsc#1206932)\n  * Include missing 'gpg' states to avoid issues on SSH minions.\n  * Optimize the number of salt calls on minion startup (bsc#1203532)\n  * Fix CVE Audit ignoring errata in parent channels if patch in successor\n    product exists (bsc#1206168)\n  * Fix CVE Audit incorrectly displaying predecessor product (bsc#1205663)\n  * Fix modular channel check during system update via XMLRPC (bsc#1206613)\n  * Trigger a package profile update when a new live-patch is installed (bsc#1206249)\n  * prevent ISE on activation key page when selected base channel value is null\n  * Only remove product catalog if PAYG ssh credentials are defined (bsc#1205943)\n  * Updated logrotate configuration (bsc#1206470)\n  * Limit changelog data in generated metadata to 20 entries\n  * Fix CLM to not remove necessary packages when filtering erratas (bsc#1195979)\n  * check for NULL in DEB package install size value\n  * Allowed cancelling pending actions with a failed prerequisite (bsc#1204712)\n  * disable cloned vendor channel auto selection by default (bsc#1204186)\n  * adapt permissions of temporary ssh key directory\n  * format results for package, errata and image build actions in\n    system history similar to state apply results\n  * Fix ClassCastException\n  * Run only minion actions that are in the pending status (bsc#1205012)\n  * Manager reboot in transactional update action chain (bsc#1201476\n  * Optimize performance of config channels operations for UI and API (bsc#1204029)\n  * Don't add the same channel twice in the System config addChannel API (bsc#1204029)\n  * fix xmlrpc call randomly failing with translation error (bsc#1203633)\n  * Optimize action chain processing on job return event (bsc#1203532)\n  * Re-calculate salt event queue numbers on restart\n  * Fix out of memory error when building a CLM project (bsc#1202217)\n  * Process salt events in FIFO order (bsc#1203532)\n  * Remove 'SSM' column text where not applicable (bsc#1203588)\n  * Fix rendering of ssm/MigrateSystems page (bsc#1204651)\n  * Pass mgr_sudo_user pillar on salt ssh client cleanup (bsc#1202093)\n  * Deny packages from older module metadata when building CLM projects (bsc#1201893)\n  * Refresh pillar data for the assigned systems when a CLM channel is built (bsc#1200169)\n  * delay hardware refresh action to avoid missing channels (bsc#1204208)\n  * During re-activation, recalculate grains if\n  * Remove unused gson-extras.jar during build\n\nspacewalk-search:\n\n- Version 4.2.9-1\n  * Updated logrotate configuration (bsc#1206470)\n\nspacewalk-web:\n\n- Version 4.2.32-1\n  * Add 'none' matcher to CLM AppStream filters (bsc#1206817)\n  * fix frontend logging in react pages\n  * Add bugzilla references to past security fixes\n    * shell-quote fix CVE-2021-42740 (bsc#1203287)\n    * moment fix CVE-2022-31129 (bsc#1203288)\n\nsupportutils-plugin-susemanager:\n\n- Version 4.2.5-1\n  * Added dependency for XML Simple\n  * update susemanager plugin to export the number of pending salt events\n\nsusemanager:\n\n- Version 4.2.40-1\n  * Add mgr-salt-ssh wrapper to use with uyuni roster Salt module (bsc#1200096)\n- Version 4.2.39-1\n  * fix bootstrap repo path for SLES for SAP 12 (bsc#1207141)\n  * make venv-salt-minion optional for SUSE Manager Proxy 4.2\n    bootstrap repository (bsc#1206933)\n  * show RHEL target for bootstrap repo creation only if it is\n    really connected to the CDN (bsc#1206861)\n  * add python3-extras to bootstrap repo as dependency of\n    python3-libxml2, optional SLES 15 does not have it and it\n    is only required on SP4 or greater (bsc#1204437) \n\nsusemanager-build-keys:\n\n- Version 15.3.6\n  * Add rpmlintrc configuration, so 'W: backup-file-in-package' for\n    the keyring is ignored. We do not ship backup files, but we own them\n    because they are created each time gpg is called, and we want them\n    removed if the package is removed\n  - uyuni-build-keys.rpmlintrc\n\nsusemanager-doc-indexes:\n\n- Include RHEL7 in Salt 3000 to Salt Bundle migration section of the\n  Client Configuration Guide\n- Update Salt Bundle guide as Salt Bundle is now the default\n  registration method\n- Re-added statement about Cobbler support in Reference Guide and Client\n  Configuration Guide (bsc#1206963)\n- Added information about java.salt_event_thread_pool_size in Large\n  Deployments Guide\n- Added information about GPG key usage in the Debian section of the\n- Updated default number of changelog entries in Administration Guide\n- Include migration guide from Salt 3000 to Bundle for SUSE Linux \n  Enterprise 12 and CentOS7 in Troubleshooting Clients\n- Removed mentions to ABRT in Reference Guide\n- Extended note about using Salt SSH with Salt Bundle in 4.2\n- Fixed Liberty Linux client tools label in Client Configuration\n  Guide\n\nsusemanager-docs_en:\n\n- Include RHEL7 in Salt 3000 to Salt Bundle migration section of the \n  Client Configuration Guide\n- Update Salt Bundle guide as Salt Bundle is now the default \n  registration method\n- Re-added statement about Cobbler support in Reference Guide and Client\n  Configuration Guide (bsc#1206963)\n- Added information about java.salt_event_thread_pool_size in Large\n  Deployments Guide\n- Added information about GPG key usage in the Debian section of the \n- Updated default number of changelog entries in Administration Guide\n- Include migration guide from Salt 3000 to Bundle for SUSE Linux \n  Enterprise 12 and CentOS7 in Troubleshooting Clients.\n- Removed mentions to ABRT in Reference Guide\n- Extended note about using Salt SSH with Salt Bundle in 4.2\n- Fixed Liberty Linux client tools label in Client Configuration \n  Guide\n\nsusemanager-schema:\n\n- Version 4.2.27-1\n  * Add created and modified fields to suseMinionInfo to make uyuni roster module cache validation more \n    accurate (bsc#1200096)\n- Version 4.2.26-1\n  * Add 'none' matcher to CLM AppStream filters (bsc#1206817)\n  * Increase cron_expr varchar length to 120 in suseRecurringAction\n    table (bsc#1205040)\n  * Keep older module metadata files in database (bsc#1201893)\n  * Fix setting of last modified date in channel clone procedure\n\nsusemanager-sls:\n\n- Version 4.2.30-1\n  * Flush uyuni roster cache if the config has changed\n  * Implement uyuni roster module for Salt (bsc#1200096)\n- Version 4.2.30-1\n  * Fix dnf plugin path calculation when using Salt Bundle (bsc#1208335)\n- Version 4.2.29-1\n  * Improve _mgractionchains.conf logs\n  * Prevent possible errors from 'mgractionschains' module when there is no action chain to resume.\n  * Fix mgrnet custom module to be compatible with old Python 2.6 (bsc#1206979) (bsc#1206981)\n  * Fix custom 'mgrcompat.module_run' state module to work with Salt 3005.1\n  * filter out libvirt engine events (bsc#1206146)\n  * Optimize the number of salt calls on minion startup (bsc#1203532)\n  * Updated logrotate configuration (bsc#1206470)\n  * Make libvirt-events.conf path depend on what minion is used (bsc#1205920)\n  * Fix kiwi inspect regexp to allow image names with '-' (bsc#1204541)\n  * Avoid installing recommended packages from assigned products (bsc#1204330)\n  * Manager reboot in transactional update action chain (bsc#1201476)\n  * Use the actual sudo user home directory for salt ssh\n    clients on bootstrap and clean up (bsc#1202093)\n  * Perform refresh with packages.pkgupdate state (bsc#1203884)\n\nuyuni-common-libs:\n\n- Version 4.2.9-1\n  * Fix crash due missing 'context_manager' when running salt-secrets-config service (bsc#1200096)\n- Version 4.2.8-1\n  * some i18n functions moved to new module which needs to be loaded\n    (bsc#1201142)\n\nvirtual-host-gatherer:\n\n- Version 1.0.24-1\n  * Report total memory of a libvirt hypervisor\n  * Improve interoperability with other Python projects\n\nwoodstox:\n\n- CVE-2022-40152: Fixed stack overflow in XML serialization. (bsc#1203521)\n\nHow to apply this update:\n\n1. Log in as root user to the SUSE Manager Server.\n2. Stop the Spacewalk service:\n`spacewalk-service stop`\n3. Apply the patch using either zypper patch or YaST Online Update.\n4. Start the Spacewalk service:\n`spacewalk-service start`\n","status":"published","published":"2023-03-02T08:32:44Z","modified":"2026-02-04T03:49:58.422418Z","updated_at":"2026-11-02T15:53:51.853735Z"},{"id":"USN-5559-1","title":"node-moment vulnerabilities","description":"It was discovered that Moment.js incorrectly handled certain input paths. An \nattacker could possibly use this issue to cause a loss of integrity by \nchanging the correct path to one of their choice. (CVE-2022-24785)\n\nIt was discovered that Moment.js incorrectly handled certain input. An attacker \ncould possibly use this issue to cause a denial of service. (CVE-2022-31129)\n","status":"published","published":"2022-08-10T11:13:31Z","modified":"2026-04-27T16:14:50.711994Z","updated_at":"2026-11-02T16:58:16.20937Z"},{"id":"USN-6550-1","title":"postfixadmin vulnerabilities","description":"It was discovered that Smarty, that is integrated in the PostfixAdmin\ncode, was not properly sanitizing user input when generating templates. An\nattacker could, through PHP injection, possibly use this issue to execute\narbitrary code. (CVE-2022-29221)\n\nIt was discovered that Moment.js, that is integrated in the PostfixAdmin\ncode, was using an inefficient parsing algorithm when processing date\nstrings in the RFC 2822 standard. An attacker could possibly use this\nissue to cause a denial of service. This issue only affected Ubuntu 22.04\nLTS. (CVE-2022-31129)\n\nIt was discovered that Smarty, that is integrated in the PostfixAdmin\ncode, was not properly escaping JavaScript code. An attacker could\npossibly use this issue to conduct cross-site scripting attacks (XSS).\n(CVE-2023-28447)\n","status":"published","published":"2023-12-12T12:15:17Z","modified":"2026-04-27T17:00:05.456651Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}