{"id":"CVE-2022-31163","aliases":["DEBIAN-CVE-2022-31163","DLA-3077-1","DLA-3866-1","EUVD-2022-6242","GHSA-5cm2-9h8c-rvfx","OESA-2024-1398","OESA-2024-1399","RHSA-2022:7242","RHSA-2023:1486","RHSA-2023:2097","RLSA-2023:2097","SUSE-SU-2022:2592-1","SUSE-SU-2022:2765-1","UBUNTU-CVE-2022-31163","openSUSE-SU-2024:12249-1","openSUSE-SU-2024:13171-1","openSUSE-SU-2024:14178-1"],"status":"published","title":"TZInfo relative path traversal vulnerability allows loading of arbitrary files","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.02449,"percentile":0.84503,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22","CWE-23"],"published":"2022-07-21T13:30:16Z","modified":"2026-11-03T08:01:18Z","fixes":[{"ecosystem":"RubyGems","package":"tzinfo","fixed_in":["0.3.61","1.2.10"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"ruby-tzinfo","fixed_in":["2.0.4-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"ruby-tzinfo","fixed_in":["2.0.4-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"ruby-tzinfo","fixed_in":["2.0.4-2"],"sources":["osv"]},{"ecosystem":"Debian:10","package":"ruby-tzinfo","fixed_in":["1.2.5-1+deb10u1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"ruby-tzinfo","fixed_in":["1.2.6-1+deb11u1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"rubygem-tzinfo","fixed_in":["1.2.5-3.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"rubygem-tzinfo","fixed_in":["1.2.5-3.oe2003sp4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.3","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"rubygem-tzinfo","fixed_in":["1.2.4-150000.3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-tzinfo","fixed_in":["1.2.2-3.3.1"],"sources":["osv"]},{"ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-tzinfo","fixed_in":["1.2.2-3.3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"rubygem-tzinfo-1.2","fixed_in":["1.2.10-1.1","1.2.11-1.5"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-tzinfo-1.2","fixed_in":["1.2.10-1.4"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.61"}]}]},{"source":"ghsa","ecosystem":"RubyGems","package":"tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.2.10"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.4-2"}]}]},{"source":"osv","ecosystem":"Debian:10","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-1+deb10u1"}]}],"versions":["1.2.5-1"]},{"source":"osv","ecosystem":"Debian:11","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.6-1+deb11u1"}]}],"versions":["1.2.6-1"]},{"source":"osv","ecosystem":"RubyGems","package":"tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.3.61"}]}],"versions":["0.0.1","0.0.2","0.0.3","0.0.4","0.1.0","0.1.1","0.1.2","0.2.0","0.2.1","0.2.2","0.3.0","0.3.1","0.3.10","0.3.11","0.3.12","0.3.13","0.3.14","0.3.15","0.3.16","0.3.17","0.3.18","0.3.19","0.3.2","0.3.20","0.3.21","0.3.22","0.3.23","0.3.24","0.3.25","0.3.26","0.3.27","0.3.28","0.3.29","0.3.3","0.3.30","0.3.31","0.3.32","0.3.33","0.3.34","0.3.35","0.3.36","0.3.37","0.3.38","0.3.39","0.3.4","0.3.40","0.3.41","0.3.42","0.3.43","0.3.44","0.3.45","0.3.46","0.3.47","0.3.48","0.3.49","0.3.5","0.3.50","0.3.51","0.3.52","0.3.53","0.3.54","0.3.55","0.3.56","0.3.57","0.3.58","0.3.59","0.3.6","0.3.60","0.3.7","0.3.8","0.3.9"]},{"source":"osv","ecosystem":"RubyGems","package":"tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.0"},{"fixed":"1.2.10"}]}],"versions":["1.0.0","1.0.1","1.1.0","1.2.0","1.2.1","1.2.2","1.2.3","1.2.4","1.2.5","1.2.6","1.2.7","1.2.8","1.2.9"]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-3.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.5-3.oe2003sp4"}]}]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el7","package":"tfm-rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3.1-1.el7sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3.1-1.el7sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.11::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3.1-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3.1-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el7","package":"tfm-rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.el7sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:satellite:6.11::el8","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.el8sat"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.12-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.12-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-puma-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.12-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-rack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-rack-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.4-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"grafana","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.4-6.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:storage:3.5:wa:el7","package":"rubygem-tzinfo-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.10-1.el7rhgs"}]}],"bundled":5},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-collection-redhat-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-collection-redhat-satellite_operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-lint","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.8-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansiblerole-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"dynflow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.0-10.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-discovery-image-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-discovery-image-service-tui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-proxy-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.9-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libcomps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libcomps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libcomps-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-cxx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsodium-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsodium-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-demo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"mosquitto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"mosquitto-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"pulpcore-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.12.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.10-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.9.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiodns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiofiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiohttp-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aioredis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiosignal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ansible-builder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-asgiref","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-async-lru","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-async-timeout","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-asyncio-throttle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.4.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-backoff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bindep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bleach","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bleach-allowlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bracex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-brotli-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cchardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cchardet-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.6.20-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-charset-normalizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-click","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-click-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-colorama","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-commonmark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-contextlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.6.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-dataclasses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-dateutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-debian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.43-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-diff-match-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20200713-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-distro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.18-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-currentuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-guid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-import-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-lifecycle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-readonly-field","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-djangorestframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-djangorestframework-queryfields","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-drf-access-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-drf-nested-routers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.93.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-drf-spectacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-dynaconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.9-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-enrich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-et-xmlfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-flake8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-frozenlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-frozenlist-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gitdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.26-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gunicorn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-idna-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-inflection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-iniparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-35.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-lockfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-lxml-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.6-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markuppy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markupsafe-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-mccabe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-multidict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-multidict-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-naya","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-odfpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-openpyxl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.3-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-parsley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pbr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pexpect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-productmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-psycopg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.15.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-certguard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-deb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.11-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.1.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycodestyle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyflakes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygobject-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygtrie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyjwkest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-6.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyrsistent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2022.2.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.37.0-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.4-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-requirements-parser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-rhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-rich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ruamel-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.17.20-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ruamel-yaml-clib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-7.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"satellite-clone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"satellite-maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"python-pulp_manifest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"python39-pulp_manifest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-amazing_print","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-apipie-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-7.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-domain_name","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.20190701-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-ffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_azure_rm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_google","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.13-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.18-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_virt_who_configure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_webhooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-http-accept","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-http-cookie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-locale","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-mime-types-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2022.0105-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-netrc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.0-6.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-oauth-tty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-snaky_hash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf_ext-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf_ext-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4.4-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4.4-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4.4-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode-display_width","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-version_gem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.13.0-6.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.13.0-6.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-collection-redhat-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-collection-redhat-satellite_operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-lint","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.8-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansiblerole-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.13-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.13-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"dynflow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.0-10.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-discovery-image-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-discovery-image-service-tui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-obsolete-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-proxy-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.9-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libcomps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libcomps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libcomps-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-cxx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsodium-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsodium-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-demo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"mosquitto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"mosquitto-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"postgresql-evr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"pulpcore-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.12.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.10-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.9.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiodns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiofiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiohttp-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aioredis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiosignal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-ansible-builder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-asgiref","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-async-lru","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-async-timeout","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-asyncio-throttle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.4.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-backoff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bindep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bleach","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bleach-allowlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bracex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-brotli-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cchardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cchardet-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.6.20-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-charset-normalizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-click","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-click-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-colorama","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-commonmark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-contextlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.6.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-dataclasses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-dateutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-debian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.43-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-diff-match-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20200713-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-distro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.18-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-currentuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-guid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-import-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-lifecycle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-readonly-field","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-djangorestframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-djangorestframework-queryfields","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-drf-access-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-drf-nested-routers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.93.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-drf-spectacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-dynaconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.9-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-enrich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-et-xmlfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-flake8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-frozenlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-frozenlist-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gitdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.26-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gunicorn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-idna-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-inflection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-iniparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-35.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-lockfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-lxml-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.6-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markuppy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markupsafe-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-mccabe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-multidict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-multidict-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-naya","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-odfpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-openpyxl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.3-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-parsley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pbr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pexpect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-productmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-psycopg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.15.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-certguard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-deb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.11-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp_manifest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.1.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycodestyle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pyflakes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pygobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pygobject-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP1","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP2","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP3","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Availability Extension 15 SP4","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.4-150000.3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-3.3.1"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"rubygem-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.2-3.3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.2-2","1.2.3-1","1.2.5-1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.5-1","1.2.6-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1.2.6-1","2.0.4-3"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.5-1","2.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-1","2.0.6-2"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"ruby-tzinfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.6-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-tzinfo-1.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"ruby3.2-rubygem-tzinfo-1.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.10-1.4"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"rubygem-tzinfo-1.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2.11-1.5"}]}]}],"affected_more":957,"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"tzinfo","product":"tzinfo"},{"vendor":"tzinfo_project","product":"tzinfo"}],"references":[{"url":"https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Third Party Advisory","advisory","web","article","report"]},{"url":"https://github.com/tzinfo/tzinfo/releases/tag/v0.3.61","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","web","report"]},{"url":"https://github.com/tzinfo/tzinfo/releases/tag/v1.2.10","tags":["x_refsource_MISC","x_transferred","Release Notes","Third Party Advisory","web","report"]},{"url":"https://github.com/tzinfo/tzinfo/commit/9eddbb5c0e682736f61d0dd803b6031a5db9eadf","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://github.com/tzinfo/tzinfo/commit/9905ca93abf7bf3e387bd592406e403cd18334c7","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2022/08/msg00009.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://lists.debian.org/debian-lts-announce/2024/09/msg00008.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31163","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/tzinfo/CVE-2022-31163.yml","tags":["web"]},{"url":"https://github.com/advisories/GHSA-5cm2-9h8c-rvfx"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31163.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-31163","tags":["advisory"]},{"url":"https://github.com/tzinfo/tzinfo","tags":["package"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1398","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2024-1399","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2022:7242","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122205","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131759","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131769","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131773","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132999","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_7242.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30122","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30122","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2022-30122.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31163","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2023:1486","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2099524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105075","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_1486.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-24790","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-24790","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-24790","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-30123","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-30123","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-30123","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-wq4h-7r42-5hrr","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31129","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31129","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31129","tags":["advisory"]},{"url":"https://github.com/moment/moment/security/advisories/GHSA-wc69-rhjr-hc9g","tags":["article"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2097","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1761012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1787456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1841534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1963266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2098079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2101708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2111159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2171399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184018","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2097.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185707","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","tags":["advisory"]},{"url":"https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22577","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2022-22577.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23514","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23514","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23514","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/tree/master/gems/loofah/CVE-2022-23514.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23515","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-228g-948r-83gx","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23516","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23516","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/loofah/CVE-2022-23516.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23517","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-5x79-w82f-gw8w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23518","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/issues/135","tags":["article"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23519","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23519","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23520","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27777","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2022-27777.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32224","tags":["advisory"]},{"url":"https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-33980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-33980","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33980","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38752","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41323","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2022/oct/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41946","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42003","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42889","tags":["advisory"]},{"url":"https://blogs.apache.org/security/entry/cve-2022-42889","tags":["article"]},{"url":"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","tags":["article"]},{"url":"https://seclists.org/oss-sec/2022/q4/22","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23969","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23969","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23969","tags":["advisory"]},{"url":"https://github.com/django/django/commit/4452642f193533e288a52c02efb5bbc766a68f95","tags":["article"]},{"url":"https://github.com/django/django/commit/8a7b22d4a623bcd95190d2f5a958472fb41e576d","tags":["article"]},{"url":"https://github.com/django/django/commit/8c660fb59239828583f17cdede3b64f208b8752c","tags":["article"]},{"url":"https://github.com/django/django/commit/9d7bd5a56b1ce0576e8e07a8001373576d277942","tags":["article"]},{"url":"https://github.com/django/django/commit/c7e0151fdf33e1b11d488b6f67b94fdf3a30614a","tags":["article"]},{"url":"https://www.djangoproject.com/weblog/2023/feb/01/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24580","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24580","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/feb/14/security-releases/","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2097","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222592-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1201835","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-31163","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222765-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-31163","tags":["report"]},{"url":"https://github.com/tzinfo/tzinfo/commit/ca29f349856d62cb2b2edb3257d9ddd2f97b3c27","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-31163","title":"TZInfo relative path traversal vulnerability allows loading of arbitrary files","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","status":"published","published":"2022-07-21T13:30:16Z","modified":"2024-09-05T14:09:42.03Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T14:34:35.615708Z"}],"euvd":[{"id":"EUVD-2022-6242","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","status":"published","published":"2022-07-21T13:30:16Z","modified":"2024-09-05T14:09:42Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:56:03.195853Z"}],"ghsa":[{"id":"GHSA-5cm2-9h8c-rvfx","title":"TZInfo relative path traversal vulnerability allows loading of arbitrary files","description":"### Impact\r\n\r\n#### Affected versions\r\n\r\n  - 0.3.60 and earlier.\r\n  - 1.0.0 to 1.2.9 when used with the Ruby data source (tzinfo-data).\r\n\r\n#### Vulnerability \r\n\r\nWith the Ruby data source (the tzinfo-data gem for tzinfo version 1.0.0 and later and built-in to earlier versions), time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process.\r\n\r\nFor example, with version 1.2.9, you can run the following to load a file with path `/tmp/payload.rb`:\r\n\r\n```ruby\r\nTZInfo::Timezone.get(\"foo\\n/../../../../../../../../../../../../../../../../tmp/payload\")\r\n```\r\n\r\nThe exact number of parent directory traversals needed will vary depending on the location of the tzinfo-data gem.\r\n\r\nTZInfo versions 1.2.6 to 1.2.9 can be made to load files from outside of the Ruby load path. Versions up to and including 1.2.5 can only be made to load files from directories within the load path. \r\n\r\nThis could be exploited in, for example, a Ruby on Rails application using tzinfo version 1.2.9, that allows file uploads and has a time zone selector that accepts arbitrary time zone identifiers. The CVSS score and severity have been set on this basis.\r\n\r\nVersions 2.0.0 and later are not vulnerable.\r\n\r\n### Patches\r\n\r\nVersions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers (commit 9eddbb5c0e682736f61d0dd803b6031a5db9eadf for 0.3.x and commit 9905ca93abf7bf3e387bd592406e403cd18334c7 for 1.2.x).\r\n\r\nNote that version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. For example if `/tmp/upload` was in the load path, then `TZInfo::Timezone.get('foo')` could load a file with path `/tmp/upload/tzinfo/definition/foo.rb`. Applications should ensure that untrusted files are not placed in a directory on the load path.\r\n\r\n### Workarounds\r\n\r\nAs a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.\r\n\r\n### For more information\r\n\r\nIf you have any questions or comments about this advisory:\r\n  - Open an issue in [the tzinfo repository](https://github.com/tzinfo/tzinfo).","status":"published","published":"2022-07-21T21:39:29Z","modified":"2023-01-31T05:08:47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T14:36:29.957996Z"}],"nvd":[{"id":"CVE-2022-31163","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","status":"published","published":"2022-07-22T04:15:14.273Z","modified":"2026-06-17T04:44:56.47Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T14:07:24.037422Z"}],"osv":[{"id":"CVE-2022-31163","title":"TZInfo relative path traversal vulnerability allows loading of arbitrary files","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","status":"published","published":"2022-07-21T13:30:16Z","modified":"2026-10-28T02:30:53.331492517Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T15:44:25.516981Z"},{"id":"DEBIAN-CVE-2022-31163","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","status":"published","published":"2022-07-22T04:15:14.273Z","modified":"2026-11-03T08:01:18.952616635Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"GHSA-5cm2-9h8c-rvfx","title":"TZInfo relative path traversal vulnerability allows loading of arbitrary files","description":"### Impact\n\n#### Affected versions\n\n  - 0.3.60 and earlier.\n  - 1.0.0 to 1.2.9 when used with the Ruby data source (tzinfo-data).\n\n#### Vulnerability \n\nWith the Ruby data source (the tzinfo-data gem for tzinfo version 1.0.0 and later and built-in to earlier versions), time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process.\n\nFor example, with version 1.2.9, you can run the following to load a file with path `/tmp/payload.rb`:\n\n```ruby\nTZInfo::Timezone.get(\"foo\\n/../../../../../../../../../../../../../../../../tmp/payload\")\n```\n\nThe exact number of parent directory traversals needed will vary depending on the location of the tzinfo-data gem.\n\nTZInfo versions 1.2.6 to 1.2.9 can be made to load files from outside of the Ruby load path. Versions up to and including 1.2.5 can only be made to load files from directories within the load path. \n\nThis could be exploited in, for example, a Ruby on Rails application using tzinfo version 1.2.9, that allows file uploads and has a time zone selector that accepts arbitrary time zone identifiers. The CVSS score and severity have been set on this basis.\n\nVersions 2.0.0 and later are not vulnerable.\n\n### Patches\n\nVersions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers (commit 9eddbb5c0e682736f61d0dd803b6031a5db9eadf for 0.3.x and commit 9905ca93abf7bf3e387bd592406e403cd18334c7 for 1.2.x).\n\nNote that version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. For example if `/tmp/upload` was in the load path, then `TZInfo::Timezone.get('foo')` could load a file with path `/tmp/upload/tzinfo/definition/foo.rb`. Applications should ensure that untrusted files are not placed in a directory on the load path.\n\n### Workarounds\n\nAs a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.\n\n### For more information\n\nIf you have any questions or comments about this advisory:\n  - Open an issue in [the tzinfo repository](https://github.com/tzinfo/tzinfo).","status":"published","published":"2022-07-21T21:39:29Z","modified":"2023-11-08T04:09:28.342031Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22","CWE-23"],"updated_at":"2026-11-02T15:46:38.213481Z"},{"id":"OESA-2024-1398","title":"rubygem-tzinfo security update","description":"TZInfo provides daylight savings aware transformations between times in different time zones.\r\n\r\nSecurity Fix(es):\r\n\r\nTZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.(CVE-2022-31163)","status":"published","published":"2024-04-12T11:06:50Z","modified":"2026-08-18T01:17:15.477092941Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"OESA-2024-1399","title":"rubygem-tzinfo security update","description":"TZInfo provides daylight savings aware transformations between times in different time zones.\r\n\r\nSecurity Fix(es):\r\n\r\nTZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.(CVE-2022-31163)","status":"published","published":"2024-04-12T11:06:50Z","modified":"2026-08-18T01:18:20.373611615Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:41.095407Z"},{"id":"RHSA-2022:7242","title":"Red Hat Security Advisory: Satellite 6.11.4 Async Security Update","status":"published","published":"2024-09-16T09:25:58Z","modified":"2026-06-27T10:15:57Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:10.139266Z"},{"id":"RHSA-2023:1486","title":"Red Hat Security Advisory: Red Hat Gluster Storage web-admin-build security update","status":"published","published":"2024-09-30T14:42:50Z","modified":"2026-10-13T10:03:57Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"RHSA-2023:2097","title":"Red Hat Security Advisory: Satellite 6.13 Release","status":"published","published":"2024-09-30T16:32:40Z","modified":"2026-10-13T10:04:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2022-31163","description":"TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as those prior to 1.2.10 when used with the Ruby data source tzinfo-data, are vulnerable to relative path traversal. With the Ruby data source, time zones are defined in Ruby files. There is one file per time zone. Time zone files are loaded with `require` on demand. In the affected versions, `TZInfo::Timezone.get` fails to validate time zone identifiers correctly, allowing a new line character within the identifier. With Ruby version 1.9.3 and later, `TZInfo::Timezone.get` can be made to load unintended files with `require`, executing them within the Ruby process. Versions 0.3.61 and 1.2.10 include fixes to correctly validate time zone identifiers. Versions 2.0.0 and later are not vulnerable. Version 0.3.61 can still load arbitrary files from the Ruby load path if their name follows the rules for a valid time zone identifier and the file has a prefix of `tzinfo/definition` within a directory in the load path. Applications should ensure that untrusted files are not placed in a directory on the load path. As a workaround, the time zone identifier can be validated before passing to `TZInfo::Timezone.get` by ensuring it matches the regular expression `\\A[A-Za-z0-9+\\-_]+(?:\\/[A-Za-z0-9+\\-_]+)*\\z`.","status":"published","published":"2022-07-22T04:15:00Z","modified":"2026-10-17T12:56:22.042063503Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"},{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.899276Z"},{"id":"DLA-3077-1","title":"ruby-tzinfo - security update","status":"published","published":"2022-08-18T00:00:00Z","modified":"2026-03-09T01:19:28.255282Z","updated_at":"2026-11-02T15:46:11.189256Z"},{"id":"DLA-3866-1","title":"ruby-tzinfo - security update","status":"published","published":"2024-09-03T00:00:00Z","modified":"2026-03-09T01:20:06.804972Z","updated_at":"2026-11-02T15:46:12.203458Z"},{"id":"openSUSE-SU-2024:12249-1","title":"ruby3.1-rubygem-tzinfo-1.2-1.2.10-1.1 on GA media","description":"These are all security issues fixed in the ruby3.1-rubygem-tzinfo-1.2-1.2.10-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:38:32.755832Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"openSUSE-SU-2024:13171-1","title":"ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 on GA media","description":"These are all security issues fixed in the ruby3.2-rubygem-tzinfo-1.2-1.2.10-1.4 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:18:53.375244Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"openSUSE-SU-2024:14178-1","title":"ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 on GA media","description":"These are all security issues fixed in the ruby3.3-rubygem-tzinfo-1.2-1.2.11-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T02:46:07.529689Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"RLSA-2023:2097","title":"Important: Satellite 6.13 Release","description":"Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based\ninfrastructure. It allows for provisioning, remote management, and\nmonitoring of multiple Linux deployments with a single centralized tool.\n\nSecurity Fix(es):\n* CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws   \n* CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack   \n* CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service   \n* CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting   \n* CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service   \n* CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service   \n* CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting  \n* CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations   \n* CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations   \n* CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers   \n* CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution  \n* CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record\n* CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults   \n* CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs   \n* CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions   \n* CVE-2022-42003 CVE-2022-42004 candlepin: various flaws   \n* CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE \n* CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service   \n* CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers   \n* CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAdditional Changes:\n\nThe items above are not a complete list of changes. This update also fixes\nseveral bugs and adds various enhancements. Documentation for these changes\nis available from the Release Notes document.","status":"published","published":"2023-05-05T15:39:58.534846Z","modified":"2026-02-05T14:15:10.893695Z","updated_at":"2026-11-02T15:53:24.322216Z"},{"id":"SUSE-SU-2022:2592-1","title":"Security update for rubygem-tzinfo","description":"This update for rubygem-tzinfo fixes the following issues:\n\n- CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).\n","status":"published","published":"2022-07-29T11:34:56Z","modified":"2026-02-04T04:39:00.229544Z","updated_at":"2026-11-02T15:53:50.965375Z"},{"id":"SUSE-SU-2022:2765-1","title":"Security update for rubygem-tzinfo","description":"This update for rubygem-tzinfo fixes the following issues:\n\n- CVE-2022-31163: Fixed relative path traversal vulnerability that allows TZInfo::Timezone.get to load arbitrary files (bsc#1201835).\n","status":"published","published":"2022-08-10T12:52:21Z","modified":"2026-02-04T04:03:12.700089Z","updated_at":"2026-11-02T15:53:50.965375Z"}]}}