{"id":"CVE-2026-86322","aliases":["EUVD-2026-124675","GHSA-h4jq-48pm-fr95","RHSA-2026:100120","RHSA-2026:99949","RHSA-2026:99950","RHSA-2026:99952"],"status":"published","title":"Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller","description":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts.","severity":{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-14","score":0.00427,"percentile":0.37467,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-639"],"published":"2026-11-12T20:19:29Z","modified":"2026-11-13T19:14:17Z","affected":[{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-crass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.20.0.12-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.0.19-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.85.35-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.85.35-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"createrepo_c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"createrepo_c-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.26.19-2.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.15-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"python3.12-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"rubygem-http-cookie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-2.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"rubygem-smart_proxy_container_gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"satellite-capsule","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.19::el9","package":"satellite-obsolete-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.3-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"rubygem-http-cookie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-2.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.19::el9","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.7-2.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.7.7-2.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"createrepo_c-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"createrepo_c-libs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"createrepo_c-libs-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-createrepo_c","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-createrepo_c-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.6-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-pulp-container","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.26.19-2.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.32.15-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"python3.12-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-foreman_ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:17.0.5-2.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-foreman_remote_execution","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.5.3-3.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-foreman_remote_execution-cockpit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.5.3-3.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-foreman_rh_cloud","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:13.2.12-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-foreman_theme_satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.2.5-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-hammer_cli_foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.18.3-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-http-cookie","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.1.6-2.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-3.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-smart_proxy_container_gateway","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.1-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"satellite","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"satellite-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"satellite-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite:6.19::el9","package":"satellite-obsolete-packages","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.19.6-1.el9sat"}]}],"bundled":20},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-crass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-crass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.4.3-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.16::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.12.0.26-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0.24-1.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.14.0.24-1.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.49.39-5.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"python3.11-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"python3.11-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el8pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"python3.11-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"python3.11-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.26.9-1.el9pc"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.26-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.26-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.26-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.26-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el8","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.3-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.3-2.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.16::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.3-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.3-2.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el8","package":"rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-3.el8sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite:6.16::el9","package":"rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-3.el9sat"}]}],"bundled":21},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-crass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.0-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.0-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.0-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.17::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.17::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-ovirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.14.0.26-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.16.0.23-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.17::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.63.21-4.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.63.21-4.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.63.21-4.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.63.21-4.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27.14-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"python3.11-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27.14-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27.14-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"python3.11-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.27.14-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.26-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.26-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.17::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.17::el9","package":"rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-3.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pysequoia","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.1.35-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-crass","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.8-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-puma","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.1-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-puma-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.1-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-puma-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:6.6.1-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.18::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_utils:6.18::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-debug","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-dynflow-sidekiq","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-ec2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-journald","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-libvirt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-openstack","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-pcp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-postgresql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-redis","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-service","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-telemetry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"foreman-vmware","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.16.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-katello","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.18.0.29-1.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_maintenance:6.18::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"ansible-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:2.16.19-4.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.73.45-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pulpcore","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.73.45-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pyjwt+crypto","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pyjwt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.15.1-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"python3.12-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29.12-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"python3.12-pulp-rpm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.29.12-1.el9pc"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"candlepin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.7-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"candlepin-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.6.7-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite_capsule:6.18::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-smart_proxy_dynflow","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.9.4-2.el9sat"}]}],"bundled":22},{"source":"osv","ecosystem":"Red Hat:satellite:6.18::el9","package":"rubygem-safemode","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.0-3.el9sat"}]}],"bundled":22}],"products":[{"vendor":"red hat","product":"red hat satellite 6.16 for rhel 8"},{"vendor":"red hat","product":"red hat satellite 6.16 for rhel 9"},{"vendor":"red hat","product":"red hat satellite 6.17 for rhel 9"},{"vendor":"red hat","product":"red hat satellite 6.18 for rhel 9"},{"vendor":"red hat","product":"red hat satellite 6.19 for rhel 9"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2026:100120","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:99949","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:99950","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2026:99952","tags":["vendor-advisory","x_refsource_REDHAT","advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86322","tags":["vdb-entry","x_refsource_REDHAT","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529289","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86322","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-h4jq-48pm-fr95"},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-48586","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-50692","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52582","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52583","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52584","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52585","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52595","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52698","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53686","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_100120.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-42784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2464122","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-42784","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-42784","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-61845","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564247","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61845","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61845","tags":["advisory"]},{"url":"https://github.com/rgrove/crass/commit/ea6726b7f7cf7e85b23aa2240b8512b4f8d11ad9","tags":["article"]},{"url":"https://github.com/rgrove/crass/releases/tag/v1.0.7","tags":["article"]},{"url":"https://github.com/rgrove/crass/security/advisories/GHSA-6wmf-3r64-vcwv","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-61847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564254","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-61847","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-61847","tags":["advisory"]},{"url":"https://github.com/rgrove/crass/commit/25d78cc607c54262e9d43ea1930f3ba5bb03dfb5","tags":["article"]},{"url":"https://github.com/rgrove/crass/security/advisories/GHSA-wwpr-jff3-395c","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-81668","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524928","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81668","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81668","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86322","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86323","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529290","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86323","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86323","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-86324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2529291","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-86324","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-86324","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-90959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2533037","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-90959","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-90959","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92893","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535903","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92893","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92893","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92904","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2535942","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92904","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92904","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102267","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542690","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102267","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102267","tags":["advisory"]},{"url":"https://github.com/jpadilla/pyjwt/commit/0a795b8e1f6ef08f634aa7086fc41cc6d5ce3e56","tags":["article"]},{"url":"https://github.com/jpadilla/pyjwt/releases/tag/2.14.0","tags":["article"]},{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-9v7f-9g4p-ffgj","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102268","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102268","tags":["advisory"]},{"url":"https://github.com/jpadilla/pyjwt/commit/8b4e233a22206b34ec1186e912e75c0b2396ac07","tags":["article"]},{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-ffc3-869f-jxw9","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102272","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542695","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102272","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102272","tags":["advisory"]},{"url":"https://github.com/jpadilla/pyjwt/commit/180783930de91876bc0d601f826a1f2956057291","tags":["article"]},{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-r6x4-923q-g947","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-102273","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2542697","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-102273","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-102273","tags":["advisory"]},{"url":"https://github.com/jpadilla/pyjwt/commit/801cd128528c62d9b23fcd161d1a2e1c17982f95","tags":["article"]},{"url":"https://github.com/jpadilla/pyjwt/security/advisories/GHSA-w2cx-738m-mc7w","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-103870","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2544606","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-103870","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-103870","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-106471","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547044","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-106471","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-106471","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547374","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107152","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107152","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107360","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547645","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107360","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107360","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547760","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107443","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107443","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-96659","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-111456","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2553939","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-111456","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111456","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2524899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2531563","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2547437","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99949.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-68006","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-68006","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-68006","tags":["advisory"]},{"url":"https://github.com/czx1111/cve/issues/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-81658","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-81658","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-81658","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-107193","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-107193","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107193","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2527098","tags":["report"]},{"url":"https://issues.redhat.com/browse/SAT-52666","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52667","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-52669","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53431","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53432","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99950.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2026-84503","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-84503","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-84503","tags":["advisory"]},{"url":"https://issues.redhat.com/browse/SAT-50730","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-50731","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53451","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53454","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53455","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53456","tags":["article"]},{"url":"https://issues.redhat.com/browse/SAT-53458","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_99952.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-86322","title":"Foreman: authorization flaw in the foreman::controller::useraware#find_user handling used by api::v2::personalaccesstokenscontroller","description":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts.","status":"published","published":"2026-11-12T20:19:29.433Z","modified":"2026-11-13T19:25:03.846Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-639"],"updated_at":"2026-11-13T17:32:19.464236Z"}],"euvd":[{"id":"EUVD-2026-124675","description":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts.","status":"published","published":"2026-11-12T20:19:29Z","modified":"2026-11-13T19:25:03Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-13T18:39:40.791935Z"}],"ghsa":[{"id":"GHSA-h4jq-48pm-fr95","title":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller:...","description":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts.","status":"published","published":"2026-11-12T21:31:32Z","modified":"2026-11-13T18:32:12Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-639"],"updated_at":"2026-11-13T18:52:24.500126Z"}],"nvd":[{"id":"CVE-2026-86322","description":"A flaw was found in Foreman’s Api::V2::PersonalAccessTokensController, where Foreman::Controller::UserAware#find_user resolves the target account using User.find(params[:user_id]) without applying the required parent-user authorization check. An attacker with the create_personal_access_tokens permission can therefore invoke POST /api/v2/users/:user_id/personal_access_tokens with another user’s ID and create a Personal Access Token on their behalf. The resulting plaintext token is returned in the API response, while PersonalAccessToken#check_permissions_after_save only validates create_personal_access_tokens on the token and does not enforce edit_users authorization on the target user. The attacker can then use the forged token to authenticate as the victim, potentially resulting in complete account takeover, including administrator accounts.","status":"published","published":"2026-11-12T21:17:33.057Z","modified":"2026-11-13T20:19:01.047Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-639"],"updated_at":"2026-11-13T19:37:11.850556Z"}],"osv":[{"id":"RHSA-2026:100120","title":"Red Hat Security Advisory: Satellite 6.19.6 Async Update","status":"published","published":"2026-11-13T18:22:10Z","modified":"2026-11-13T19:14:11.710712972Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-13T19:24:45.171102Z"},{"id":"RHSA-2026:99949","title":"Red Hat Security Advisory: Satellite 6.16.15 Async Update","status":"published","published":"2026-11-13T18:52:19Z","modified":"2026-11-14T10:02:40Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-13T19:24:59.218663Z"},{"id":"RHSA-2026:99950","title":"Red Hat Security Advisory: Satellite 6.17.13 Async Update","status":"published","published":"2026-11-13T18:52:19Z","modified":"2026-11-14T10:02:40Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-13T19:24:59.218663Z"},{"id":"RHSA-2026:99952","title":"Red Hat Security Advisory: Satellite 6.18.11 Async Update","status":"published","published":"2026-11-13T18:52:20Z","modified":"2026-11-14T10:02:41Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-13T19:24:59.218663Z"}]}}