{"id":"CVE-2022-33980","aliases":["DEBIAN-CVE-2022-33980","DSA-5290-1","EUVD-2022-6450","GHSA-xj57-8qj4-c4m6","RHSA-2023:2097","RLSA-2023:2097","UBUNTU-CVE-2022-33980","openSUSE-SU-2024:13259-1"],"status":"published","title":"Apache Commons Configuration insecure interpolation defaults","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.44644,"percentile":0.98777,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-74"],"published":"2022-07-06T00:00:00Z","modified":"2026-11-04T20:01:39Z","exploits":[{"source":"pocgithub","id":"tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE","title":"tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE","date":"2022-07-08","url":"https://github.com/tangxiaofeng7/CVE-2022-33980-Apache-Commons-Configuration-RCE"},{"source":"pocgithub","id":"HKirito/CVE-2022-33980","title":"HKirito/CVE-2022-33980","date":"2022-08-10","url":"https://github.com/HKirito/CVE-2022-33980"},{"source":"pocgithub","id":"sammwyy/CVE-2022-33980-POC","title":"sammwyy/CVE-2022-33980-POC","date":"2022-10-17","url":"https://github.com/sammwyy/CVE-2022-33980-POC"},{"source":"pocgithub","id":"P0lar1ght/CVE-2022-33980-POC","title":"P0lar1ght/CVE-2022-33980-POC","date":"2022-12-22","url":"https://github.com/P0lar1ght/CVE-2022-33980-POC"},{"source":"pocgithub","id":"joseluisinigo/riskootext4shell","title":"joseluisinigo/riskootext4shell","date":"2023-07-18","url":"https://github.com/joseluisinigo/riskootext4shell"}],"fixes":[{"ecosystem":"Maven","package":"org.apache.commons:commons-configuration2","fixed_in":["2.8.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"commons-configuration2","fixed_in":["2.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"commons-configuration2","fixed_in":["2.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"commons-configuration2","fixed_in":["2.8.0-1"],"sources":["osv"]},{"ecosystem":"Debian:11","package":"commons-configuration2","fixed_in":["2.8.0-1~deb11u1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-configuration2","fixed_in":["2.9.0-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.commons:commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4"},{"fixed":"2.8.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.8.0-1~deb11u1"}]}],"versions":["2.7-2"]},{"source":"osv","ecosystem":"Maven","package":"org.apache.commons:commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.4"},{"fixed":"2.8.0"}]}],"versions":["2.4","2.5","2.6","2.7"]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-collection-redhat-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-collection-redhat-satellite_operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-lint","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.8-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansible-runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansiblerole-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"createrepo_c-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"dynflow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.0-10.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-discovery-image-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-discovery-image-service-tui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-proxy-content","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"foreman-proxy-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.9-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libcomps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libcomps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libcomps-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-cxx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsodium-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsodium-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-demo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libsolv-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"libwebsockets-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"mosquitto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"mosquitto-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"pulpcore-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.12.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.10-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.9.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiodns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiofiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiohttp-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aioredis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-aiosignal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ansible-builder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-asgiref","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-async-lru","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-async-timeout","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-asyncio-throttle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.4.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-backoff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bindep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bleach","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bleach-allowlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-bracex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-brotli-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cchardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cchardet-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.6.20-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-charset-normalizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-click","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-click-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-colorama","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-commonmark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-contextlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.6.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-dataclasses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-dateutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-debian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.43-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-diff-match-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20200713-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-distro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.18-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-currentuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-guid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-import-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-lifecycle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-django-readonly-field","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-djangorestframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-djangorestframework-queryfields","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-drf-access-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-drf-nested-routers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.93.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-drf-spectacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-dynaconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.9-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-enrich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-et-xmlfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-flake8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-frozenlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-frozenlist-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gitdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.26-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-gunicorn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-idna-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-inflection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-iniparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-35.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-lockfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-lxml-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.6-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markuppy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-markupsafe-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-mccabe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-multidict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-multidict-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-naya","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-odfpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-openpyxl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.3-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-parsley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pbr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pexpect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-productmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-psycopg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.15.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-certguard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-deb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.11-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.1.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycodestyle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyflakes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygobject-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pygtrie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyjwkest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.2-6.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyparsing","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.7-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyrsistent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyrsistent-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pytz","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2022.2.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-pyyaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-qpid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.37.0-1.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.4-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-requests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.28.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-requirements-parser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-rhsm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-rhsm-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.19.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-rich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:10.12.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ruamel-yaml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.17.20-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.13::el8","package":"python-ruamel-yaml-clib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.6-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-7.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"rubygem-foreman_maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.2.8-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"satellite-clone","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.13::el8","package":"satellite-maintain","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"python-pulp_manifest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"python39-pulp_manifest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-amazing_print","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-apipie-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-clamp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-7.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-domain_name","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.20190701-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-fast_gettext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-ffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-ffi-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-ffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-gssapi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_admin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_azure_rm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_bootdisk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_discovery","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_google","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_openscap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.13-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_tasks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.18-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_templates","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_virt_who_configure","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.9-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_foreman_webhooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.4-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hammer_cli_katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-hashie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-highline","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.3-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-http-accept","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-http-cookie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-jwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.5.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-little-plugger","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.4-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-locale","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-logging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-mime-types","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-mime-types-data","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2022.0105-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-multi_json","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-netrc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.11.0-6.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-oauth-tty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.5-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-powerbar","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-rest-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-snaky_hash","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.4-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf_ext","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf_ext-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unf_ext-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.8.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4.4-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4.4-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4.4-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-unicode-display_width","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.8.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"rubygem-version_gem","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.13.0-6.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.13::el8","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.13.0-6.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-collection-redhat-satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-collection-redhat-satellite_operations","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-lint","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.8-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansible-runner","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansiblerole-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.2.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"ansiblerole-insights-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.1-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.13-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.13-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"cjson","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"cjson-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"cjson-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.14-5.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"createrepo_c-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.20.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"dynflow-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.6.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-bootloaders-redhat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-bootloaders-redhat-tftpboot","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:202102220000-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-discovery-image","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:4.1.0-10.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-discovery-image-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-discovery-image-service-tui","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-installer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-installer-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.5.2.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-obsolete-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-proxy-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-certs-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-client-bootstrap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.9-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"katello-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libcomps","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libcomps-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libcomps-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.18-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-cxx","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-cxx-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-sql-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-sql-devel-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-tcl-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libdb-utils-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.3.28-42.el8_4"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsodium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsodium-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsodium-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.17-3.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-demo-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libsolv-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.22-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"libwebsockets-tests-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-2.el8"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"mosquitto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"mosquitto-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"mosquitto-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.14-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"postgresql-evr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.0.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"pulpcore-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-agent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.12.1-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-agent-oauth","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.10-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppet-foreman_scap_client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppetlabs-stdlib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.2.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.9.3-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiodns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiofiles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.8.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiohttp-xmlrpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aioredis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-aiosignal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-ansible-builder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-asgiref","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-async-lru","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-async-timeout","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-asyncio-throttle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.2-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-attrs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.4.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-backoff","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bindep","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bleach","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bleach-allowlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.3-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-bracex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-brotli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-brotli-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cchardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cchardet-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.7-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-certifi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2020.6.20-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cffi","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cffi-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.15.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-chardet","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-charset-normalizer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-click","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:8.1.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-click-shell","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-colorama","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-commonmark","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-contextlib2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.6.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cryptography","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-cryptography-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.8-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-daemon","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-dataclasses","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.8-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-dateutil","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-debian","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.43-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-defusedxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-deprecated","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.13-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-diff-match-patch","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20200713-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-distro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.2.18-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-currentuser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.3-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-filter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:22.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-guid","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-import-export","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-lifecycle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-django-readonly-field","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-djangorestframework","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.13.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-djangorestframework-queryfields","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-docutils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.19-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-drf-access-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-drf-nested-routers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.93.4-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-drf-spectacular","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.23.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-dynaconf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.9-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-ecdsa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-enrich","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-et-xmlfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-flake8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-frozenlist","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-frozenlist-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3.0-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-future","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.18.2-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gitdb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gitpython","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.26-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gnupg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-gunicorn","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:20.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-idna","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-idna-ssl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-importlib-metadata","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.10.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-inflection","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.5.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-iniparse","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4-35.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.2-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-jsonschema","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.9.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-lockfile","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.12.2-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-lxml","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-lxml-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markdown","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.3.6-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markuppy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.14-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markupsafe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-markupsafe-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-mccabe","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-multidict","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-multidict-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.0.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-naya","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-odfpy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.1-6.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-openpyxl","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.9-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-packaging","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:21.3-1.1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-parsley","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pbr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.8.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pexpect","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.8.0-2.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-productmd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.33-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-psycopg2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-psycopg2-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.9.3-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-ptyprocess","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.7.0-1.el8sat"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.15.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-certguard","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.5-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.14.0-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.14.3-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-deb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.20.0-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-file","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.1-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.11-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulp_manifest","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.21.6-1.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pyOpenSSL","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:19.1.0-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycairo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycairo-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.20.1-3.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycares","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycares-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.1.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycodestyle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.0-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycparser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.21-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.1-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pyflakes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.1-5.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.11.2-2.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pygobject","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Red Hat:satellite:6.13::el8","package":"python-pygobject-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.40.1-4.el8pc"}]}],"bundled":26},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.7-2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"apache-commons-configuration2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.9.0-1.1"}]}]}],"affected_more":957,"products":[{"vendor":"apache","product":"commons_configuration"},{"vendor":"apache software foundation","product":"apache commons configuration"},{"vendor":"debian","product":"debian_linux"},{"vendor":"netapp","product":"snapcenter"}],"references":[{"url":"https://lists.apache.org/thread/tdf5n7j80lfxdhs2764vn0xmpfodm87s","tags":["x_transferred","Mailing List","Vendor Advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2022/07/06/5","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://security.netapp.com/advisory/ntap-20221028-0015/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2022/11/15/4","tags":["mailing-list","x_transferred","Mailing List","Third Party Advisory","article","web"]},{"url":"https://www.debian.org/security/2022/dsa-5290","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-33980","tags":["advisory"]},{"url":"https://commons.apache.org/proper/commons-configuration/changes-report.html#a2.8.0","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/CONFIGURATION-753","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/CONFIGURATION-764","tags":["web"]},{"url":"https://github.com/advisories/GHSA-xj57-8qj4-c4m6"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/33xxx/CVE-2022-33980.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-33980","tags":["advisory"]},{"url":"https://github.com/apache/commons-configuration","tags":["package"]},{"url":"https://security.netapp.com/advisory/ntap-20221028-0015","tags":["web"]},{"url":"https://access.redhat.com/errata/RHSA-2023:2097","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1225819","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1266407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1630294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1638226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1650468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1761012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1786358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1787456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1826648","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1837767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1841534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1845489","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1880947","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1888667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1895976","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1920810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1931533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1950468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1952529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956985","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1963266","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964037","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1965871","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1978995","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990790","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1990875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1995470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997186","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1997199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2029402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2032040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2043600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2050234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2052904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2056402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2057314","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2060099","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2062526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063999","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2066323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2069438","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2073847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2077363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2080302","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088156","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2088529","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2094912","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2098079","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2101708","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2102078","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105067","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2105441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106475","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2107758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2110551","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2111159","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2115970","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2116375","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2118651","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119155","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2119911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2120640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121210","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2122617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123593","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123696","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123835","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2123932","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124419","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124520","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126349","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126372","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126789","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127180","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127470","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2127998","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2128894","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129710","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2130698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131369","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131839","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2132452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133343","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2133615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134283","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2134682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135247","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2135435","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137350","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2137539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139209","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139441","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139545","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140628","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2140807","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142514","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2142555","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143451","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143695","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144044","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2147579","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148813","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149030","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149543","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149730","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149896","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150311","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2150380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151333","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151564","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2151935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152609","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153262","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153423","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153720","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154512","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2154734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155221","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155911","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2156941","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157627","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2157869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158738","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159963","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160297","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160497","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160508","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160528","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160705","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160752","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161304","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2161776","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162129","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162130","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163425","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163577","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2163788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164989","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165482","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165848","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166303","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166457","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166964","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167685","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168041","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168096","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168168","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168330","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169633","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169858","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2169866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170034","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2171399","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173570","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174734","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2174910","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175226","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180417","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184018","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2023/rhsa-2023_2097.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-46877","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2185707","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-46877","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-46877","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-1471","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-1471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-1471","tags":["advisory"]},{"url":"https://github.com/google/security-research/security/advisories/GHSA-mjmj-j48q-9wg2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-22577","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-22577","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-22577","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionpack/CVE-2022-22577.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23514","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23514","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23514","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/tree/master/gems/loofah/CVE-2022-23514.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23515","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23515","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23515","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-228g-948r-83gx","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23516","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23516","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23516","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/loofah/CVE-2022-23516.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23517","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23517","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23517","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-5x79-w82f-gw8w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23518","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23518","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23518","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/issues/135","tags":["article"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-mcvf-2q2m-x72m","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23519","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23519","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23519","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-9h9g-93gc-623h","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23520","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23520","tags":["advisory"]},{"url":"https://github.com/rails/rails-html-sanitizer/security/advisories/GHSA-rrfc-7g8p-99q8","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-25857","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-25857","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-25857","tags":["advisory"]},{"url":"https://bitbucket.org/snakeyaml/snakeyaml/issues/525","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-27777","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-27777","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27777","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/actionview/CVE-2022-27777.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-31163","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-31163","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-31163","tags":["advisory"]},{"url":"https://github.com/tzinfo/tzinfo/security/advisories/GHSA-5cm2-9h8c-rvfx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-32224","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-32224","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32224","tags":["advisory"]},{"url":"https://discuss.rubyonrails.org/t/cve-2022-32224-possible-rce-escalation-bug-with-serialized-columns-in-active-record/81017","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-33980","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-33980","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38749","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38749","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38749","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38750","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38750","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38750","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38751","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38751","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38751","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-38752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-38752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-38752","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41323","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2022/oct/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41946","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41946","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42003","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42003","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42003","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42004","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42004","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42004","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-42889","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-42889","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-42889","tags":["advisory"]},{"url":"https://blogs.apache.org/security/entry/cve-2022-42889","tags":["article"]},{"url":"https://lists.apache.org/thread/n2bd4vdsgkqh2tm14l1wyc3jyol7s1om","tags":["article"]},{"url":"https://seclists.org/oss-sec/2022/q4/22","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-23969","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-23969","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-23969","tags":["advisory"]},{"url":"https://github.com/django/django/commit/4452642f193533e288a52c02efb5bbc766a68f95","tags":["article"]},{"url":"https://github.com/django/django/commit/8a7b22d4a623bcd95190d2f5a958472fb41e576d","tags":["article"]},{"url":"https://github.com/django/django/commit/8c660fb59239828583f17cdede3b64f208b8752c","tags":["article"]},{"url":"https://github.com/django/django/commit/9d7bd5a56b1ce0576e8e07a8001373576d277942","tags":["article"]},{"url":"https://github.com/django/django/commit/c7e0151fdf33e1b11d488b6f67b94fdf3a30614a","tags":["article"]},{"url":"https://www.djangoproject.com/weblog/2023/feb/01/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-24580","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-24580","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-24580","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/feb/14/security-releases/","tags":["article"]},{"url":"https://errata.rockylinux.org/RLSA-2023:2097","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2022-33980","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2022/07/06/5","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2022-33980","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2022-33980","title":"Apache Commons Configuration insecure interpolation defaults","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-06T00:00:00Z","modified":"2024-08-03T08:16:16.672Z","updated_at":"2026-11-02T14:34:40.275153Z"}],"euvd":[{"id":"EUVD-2022-6450","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-06T00:00:00Z","modified":"2024-08-03T08:16:16Z","updated_at":"2026-11-03T03:25:29.68115Z"}],"ghsa":[{"id":"GHSA-xj57-8qj4-c4m6","title":"Code injection in Apache Commons Configuration","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-07T00:00:26Z","modified":"2023-01-31T05:08:25Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T14:36:29.957996Z"}],"nvd":[{"id":"CVE-2022-33980","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-06T13:15:09.533Z","modified":"2026-06-17T04:49:36.197Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:22.966735Z"}],"osv":[{"id":"DEBIAN-CVE-2022-33980","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-06T13:15:09.533Z","modified":"2026-11-03T08:04:08.521607686Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T08:23:07.763774Z"},{"id":"GHSA-xj57-8qj4-c4m6","title":"Code injection in Apache Commons Configuration","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-07T00:00:26Z","modified":"2024-02-17T05:33:18.672687Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-74"],"updated_at":"2026-11-02T15:47:00.198893Z"},{"id":"RHSA-2023:2097","title":"Red Hat Security Advisory: Satellite 6.13 Release","status":"published","published":"2024-09-30T16:32:40Z","modified":"2026-10-13T10:04:04Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:10.611604Z"},{"id":"UBUNTU-CVE-2022-33980","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-06T13:15:00Z","modified":"2026-11-04T20:01:39.646745192Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-06T14:22:05.843011Z"},{"id":"CVE-2022-33980","title":"Apache Commons Configuration insecure interpolation defaults","description":"Apache Commons Configuration performs variable interpolation, allowing properties to be dynamically evaluated and expanded. The standard format for interpolation is \"${prefix:name}\", where \"prefix\" is used to locate an instance of org.apache.commons.configuration2.interpol.Lookup that performs the interpolation. Starting with version 2.4 and continuing through 2.7, the set of default Lookup instances included interpolators that could result in arbitrary code execution or contact with remote servers. These lookups are: - \"script\" - execute expressions using the JVM script execution engine (javax.script) - \"dns\" - resolve dns records - \"url\" - load values from urls, including from remote servers Applications using the interpolation defaults in the affected versions may be vulnerable to remote code execution or unintentional contact with remote servers if untrusted configuration values are used. Users are recommended to upgrade to Apache Commons Configuration 2.8.0, which disables the problematic interpolators by default.","status":"published","published":"2022-07-06T00:00:00Z","modified":"2026-10-28T02:30:24.142777474Z","updated_at":"2026-11-02T15:44:25.860945Z"},{"id":"DSA-5290-1","title":"commons-configuration2 - security update","status":"published","published":"2022-11-28T00:00:00Z","modified":"2026-03-09T02:11:02.897923Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:13259-1","title":"apache-commons-configuration2-2.9.0-1.1 on GA media","description":"These are all security issues fixed in the apache-commons-configuration2-2.9.0-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:15:44.941441Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"RLSA-2023:2097","title":"Important: Satellite 6.13 Release","description":"Rocky Enterprise Software Foundation Satellite is a systems management tool for Linux-based\ninfrastructure. It allows for provisioning, remote management, and\nmonitoring of multiple Linux deployments with a single centralized tool.\n\nSecurity Fix(es):\n* CVE-2022-1471 CVE-2022-25857 CVE-2022-38749 CVE-2022-38750 CVE-2022-38751 CVE-2022-38752 candlepin and puppetserver: various flaws   \n* CVE-2022-22577 tfm-rubygem-actionpack: rubygem-actionpack: Possible cross-site scripting vulnerability in Action Pack   \n* CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service   \n* CVE-2022-23515 rubygem-loofah: rubygem-loofah: Improper neutralization of data URIs leading to Cross Site Scripting   \n* CVE-2022-23516 rubygem-loofah: Uncontrolled Recursion leading to denial of service   \n* CVE-2022-23517 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Inefficient Regular Expression leading to denial of service   \n* CVE-2022-23518 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Improper neutralization of data URIs leading to Cross site scripting  \n* CVE-2022-23519 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations   \n* CVE-2022-23520 tfm-rubygem-rails-html-sanitizer: rubygem-rails-html-sanitizer: Cross site scripting vulnerability with certain configurations   \n* CVE-2022-27777 tfm-rubygem-actionview: Possible cross-site scripting vulnerability in Action View tag helpers   \n* CVE-2022-31163 rubygem-tzinfo: rubygem-tzinfo: arbitrary code execution  \n* CVE-2022-32224 tfm-rubygem-activerecord: activerecord: Possible RCE escalation bug with Serialized Columns in Active Record\n* CVE-2022-33980 candlepin: apache-commons-configuration2: Apache Commons Configuration insecure interpolation defaults   \n* CVE-2022-41323 satellite-capsule:el8/python-django: Potential denial-of-service vulnerability in internationalized URLs   \n* CVE-2022-41946 candlepin: postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions   \n* CVE-2022-42003 CVE-2022-42004 candlepin: various flaws   \n* CVE-2022-42889 candlepin: apache-commons-text: variable interpolation RCE \n* CVE-2022-23514 rubygem-loofah: inefficient regular expression leading to denial of service   \n* CVE-2023-23969 python-django: Potential denial-of-service via Accept-Language headers   \n* CVE-2023-24580 python-django: Potential denial-of-service vulnerability in file uploads\n\nFor more details about the security issue(s), including the impact, a CVSS\nscore, acknowledgments, and other related information, refer to the CVE\npage(s) listed in the References section.\n\nAdditional Changes:\n\nThe items above are not a complete list of changes. This update also fixes\nseveral bugs and adds various enhancements. Documentation for these changes\nis available from the Release Notes document.","status":"published","published":"2023-05-05T15:39:58.534846Z","modified":"2026-02-05T14:15:10.893695Z","updated_at":"2026-11-02T15:53:24.322216Z"}]}}