katello vulnerabilities (RubyGems)

8 vulnerabilities.

• katello RubyGems Katello: missing repository authorization in content_uploads exposes cross-product content existence CVE-2026-12515 Fix available 4.3 MediumJune 17, 2026
• katello RubyGems Rubygem-katello: katello: denial of service and potential information disclosure via sql injection CVE-2026-4324 Fix available 5.4 MediumMarch 17, 2026
• katello RubyGems Katello cleartext password storage issue CVE-2019-14825 Fix available 4.1 MediumNovember 25, 2019
• katello RubyGems katello Cross-site Scripting vulnerability CVE-2018-16887 Fix available 5.4 MediumJanuary 13, 2019
• katello RubyGems katello SQL Injection vulnerability CVE-2018-14623 Fix available 4.3 MediumDecember 13, 2018
• katello RubyGems katello Improper Privilege Management vulnerability CVE-2017-2662 Fix available 4.3 MediumAugust 22, 2018
• katello RubyGems Katello SQL Injection vulnerabilities CVE-2016-3072 Fix available 8.8 HighJune 7, 2016
• katello RubyGems Katello uses hard coded credential CVE-2012-3503 Fix available 9.8 CriticalAugust 25, 2012