{"id":"CVE-2024-22047","aliases":["EUVD-2023-1560","GHSA-hjp3-5g2q-7jww","RHSA-2024:2010"],"status":"published","title":"Audited Log Integrity Errors Due to Race Condition","description":"A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.","severity":{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00498,"percentile":0.43034,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2023-05-01T14:00:47Z","modified":"2026-11-09T02:45:48Z","fixes":[{"ecosystem":"RubyGems","package":"audited","fixed_in":["5.3.3"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"RubyGems","package":"audited","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"5.3.3"}]}]},{"source":"osv","ecosystem":"RubyGems","package":"audited","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"5.3.3"}]}],"versions":["4.0.0","4.10.0","4.2.0","4.2.1","4.2.2","4.3.0","4.4.0","4.4.1","4.5.0","4.6.0","4.7.0","4.7.1","4.8.0","4.9.0","5.0.0","5.0.1","5.0.2","5.1.0","5.2.0","5.3.0","5.3.1","5.3.2"]},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pygments","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.17.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.15::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.1.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-galaxy-importer","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.4.19-2.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"puppetserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.14.0-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-aiohttp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-aiohttp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-aiohttp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.9.2-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-activesupport","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.1.7.6-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-django","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.9-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-pycryptodomex-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pycryptodomex","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-pycryptodomex-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.20.0-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"rubygem-audited","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.4.2-1.el8sat"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18},{"source":"osv","ecosystem":"Red Hat:satellite:6.15::el8","package":"python3.11-jinja2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.3-1.el8pc"}]}],"bundled":18}],"products":[{"vendor":"collectiveidea","product":"audited"}],"references":[{"url":"https://github.com/collectiveidea/audited/security/advisories/GHSA-hjp3-5g2q-7jww","tags":["vendor-advisory","x_transferred","Vendor Advisory","advisory","web"]},{"url":"https://github.com/collectiveidea/audited/issues/601","tags":["issue-tracking","x_transferred","Issue Tracking","Patch","Vendor Advisory","report","web"]},{"url":"https://github.com/collectiveidea/audited/pull/669","tags":["issue-tracking","patch","related","x_transferred","Patch","fix","web"]},{"url":"https://github.com/collectiveidea/audited/pull/671","tags":["issue-tracking","patch","related","x_transferred","Patch","fix","web"]},{"url":"https://github.com/advisories/GHSA-hjp3-5g2q-7jww","tags":["vendor-advisory","third-party-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://vulncheck.com/advisories/vc-advisory-GHSA-hjp3-5g2q-7jww","tags":["third-party-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22047","tags":["advisory"]},{"url":"https://github.com/collectiveidea/audited/commit/342734c9396d8f96d3165f1d8531c626139fa4c6","tags":["web"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/audited/CVE-2024-22047.yml","tags":["web"]},{"url":"https://rubygems.org","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/22xxx/CVE-2024-22047.json","tags":["advisory"]},{"url":"https://github.com/collectiveidea/audited","tags":["package"]},{"url":"https://access.redhat.com/errata/RHSA-2024:2010","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251014","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251019","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251200","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2251643","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252064","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252235","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252248","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252450","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252945","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2252968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253191","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253212","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253381","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253519","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253618","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2253673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254230","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254383","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254408","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254491","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254612","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254690","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254694","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254712","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2254827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255026","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255329","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255346","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255424","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255426","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2255969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256136","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256154","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256411","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256452","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2256927","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257340","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2257957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258109","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2258876","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2259163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261887","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2261909","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2263815","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2264342","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2267949","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2269363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270295","tags":["report"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1393613","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1792187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1884395","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1937203","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1943306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1964539","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1967073","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976178","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1976213","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1992495","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1993917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1994654","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2015344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2026701","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2048805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2053416","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2063717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2068527","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2070487","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2071097","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2081244","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2087537","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2091900","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2096930","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2097084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2103757","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2104582","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2106256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2109740","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2121957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2124275","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125367","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2125809","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2126420","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2129296","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2131798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2138905","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2139834","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2141421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2143980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2144615","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148439","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2148534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2149288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2152709","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153523","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2153548","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155218","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155444","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2158959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2159706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2160160","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162637","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2162882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2164997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2165092","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2166428","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2167493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168173","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168202","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168503","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168728","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2168866","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170016","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2170727","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172083","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172094","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172384","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172393","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172394","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2172756","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2173870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2175132","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2179974","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180568","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2180761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181595","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2181991","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2184151","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2188287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189318","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2189687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2192939","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2193010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2203077","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208557","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2208588","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2209968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2212499","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213163","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214285","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214331","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2215310","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216006","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2216533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2217397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218179","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2218821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2221673","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222816","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2222968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2223567","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224170","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2224719","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2225534","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2226714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2227753","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2229810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230237","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2230459","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2231814","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232500","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2232625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2233490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234387","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2234467","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236418","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236502","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2236806","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2237258","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238906","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2238952","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239630","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2239767","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2240956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241017","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241046","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241934","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242214","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242812","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243256","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2243679","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244122","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244370","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2244811","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2245455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246121","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2246546","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2247081","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2248865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249540","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249736","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249825","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249913","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2250397","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2249970","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_2010.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-40896","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-40896","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-40896","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-4320","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-4320","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4320","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5189","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5189","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5189","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-36479","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-36479","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-36479","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-37276","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-37276","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-37276","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-45c4-8wx5-qw6w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-38037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-38037","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38037","tags":["advisory"]},{"url":"https://github.com/rubysec/ruby-advisory-db/blob/master/gems/activesupport/CVE-2023-38037.yml","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-40167","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-40167","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40167","tags":["advisory"]},{"url":"https://github.com/eclipse/jetty.project/security/advisories/GHSA-hmr7-m48g-48f6","tags":["article"]},{"url":"https://www.rfc-editor.org/rfc/rfc9110#section-8.6","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-41164","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-41164","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-41164","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/sep/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-43665","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-43665","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-43665","tags":["advisory"]},{"url":"https://www.djangoproject.com/weblog/2023/oct/04/security-releases/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-47627","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-47627","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47627","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-gfw2-4jvh-wgfg","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49081","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49081","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49081","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-q3qx-c6g2-7pw2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-49082","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-49082","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-49082","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-qvrw-v9rv-5rjx","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-52323","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-52323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-52323","tags":["advisory"]},{"url":"https://github.com/Legrandin/pycryptodome/blob/master/Changelog.rst","tags":["article"]},{"url":"https://pypi.org/project/pycryptodomex/#history","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-21647","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-21647","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-21647","tags":["advisory"]},{"url":"https://github.com/puma/puma/security/advisories/GHSA-c2f4-cvqm-65w2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22047","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22047","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-22195","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-22195","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-22195","tags":["advisory"]},{"url":"https://github.com/pallets/jinja/releases/tag/3.1.3","tags":["article"]},{"url":"https://github.com/pallets/jinja/security/advisories/GHSA-h5c8-rqwp-cp95","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23334","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23334","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23334","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-5h86-8mv2-jq9f","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-23829","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-23829","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23829","tags":["advisory"]},{"url":"https://github.com/aio-libs/aiohttp/security/advisories/GHSA-8qpw-xqxj-h4r2","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2024-22047","title":"Audited Log Integrity Errors Due to Race Condition","description":"A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.","status":"published","published":"2024-01-04T20:32:02.771Z","modified":"2026-11-08T13:59:53.552Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"cna"}],"cwes":["CWE-362"],"updated_at":"2026-11-08T14:43:22.764053Z"}],"euvd":[{"id":"EUVD-2023-1560","description":"A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.","status":"published","published":"2024-01-04T20:32:02Z","modified":"2026-11-08T13:59:53Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-08T15:13:10.25084Z"}],"ghsa":[{"id":"GHSA-hjp3-5g2q-7jww","title":"Race Condition leading to logging errors","description":"In certain setups with threaded web servers, Audited's use of `Thread.current` can incorrectly attributed audits to the wrong user. \n\nFixed in 5.3.3. \n\nIn March, @convisoappsec noticed that the library in question had a Race Condition problem, which caused logs to be registered at times with different users than those who performed the genuine actions.\n\n- The first issue we identified was from November 2021: https://github.com/collectiveidea/audited/issues/601 \n- So the solution was implemented in the following Pull Request: https://github.com/collectiveidea/audited/pull/669 \n- And the feature was published in version 5.3.3: RELEASE: https://github.com/collectiveidea/audited/pull/671\n","status":"published","published":"2023-05-01T14:00:47Z","modified":"2024-01-08T19:17:25Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T14:37:30.183224Z"}],"nvd":[{"id":"CVE-2024-22047","description":"A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.","status":"published","published":"2024-01-04T21:15:09.72Z","modified":"2026-10-29T21:17:02.613Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"secondary"},{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:09:30.070039Z"}],"osv":[{"id":"CVE-2024-22047","title":"Audited Log Integrity Errors Due to Race Condition","description":"A race condition exists in Audited 4.0.0 before 5.3.3 that can result in an authenticated user to cause audit log entries to be attributed to another user.","status":"published","published":"2024-01-04T20:32:02.771Z","modified":"2026-11-09T02:45:48.573182491Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"cwes":["CWE-362"],"updated_at":"2026-11-09T03:16:26.778234Z"},{"id":"GHSA-hjp3-5g2q-7jww","title":"Race Condition leading to logging errors","description":"In certain setups with threaded web servers, Audited's use of `Thread.current` can incorrectly attributed audits to the wrong user. \n\nFixed in 5.3.3. \n\nIn March, @convisoappsec noticed that the library in question had a Race Condition problem, which caused logs to be registered at times with different users than those who performed the genuine actions.\n\n- The first issue we identified was from November 2021: https://github.com/collectiveidea/audited/issues/601 \n- So the solution was implemented in the following Pull Request: https://github.com/collectiveidea/audited/pull/669 \n- And the feature was published in version 5.3.3: RELEASE: https://github.com/collectiveidea/audited/pull/671\n","status":"published","published":"2023-05-01T14:00:47Z","modified":"2026-07-08T06:53:11.259453576Z","cvss":[{"version":"3.1","score":3.1,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"low"}],"updated_at":"2026-11-02T15:46:49.28217Z"},{"id":"RHSA-2024:2010","title":"Red Hat Security Advisory: Satellite 6.15.0 release","status":"published","published":"2024-09-30T15:58:05Z","modified":"2026-10-13T10:06:37Z","cvss":[{"version":"3.1","score":7.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:13.30378Z"}]}}