CVE-2026-41898 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

CVE-2026-41678 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

GHSA-PQF5-4PQQ-29F5 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

GHSA-XMGF-HQ76-4VX2 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

GHSA-HPPC-G8H3-XHP3 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

GHSA-8C75-8MHR-P7R9 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

CVE-2026-41676 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

CVE-2026-41677 vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

GHSA-GHM9-CR32-G9QJ vulnerabilities

Vulnerabilities for packages: sccache, deno, guestproxyagent, vector, rustls-openssl-client, sentry-cli, sqlx, rpm-sequoia, komodo, sdp-k8s-injector, bootc, rustup, valkey-ldap, ztunnel-fips, typst...

SQL Injection

Overview katello is a package that adds Content and Subscription Management to Foreman Affected versions of this package are vulnerable to SQL Injection via improper sanitization of user input in the sortby parameter of the /api/hosts/bootcimages endpoint. An attacker can cause database errors or...

GHSA-FWJ4-6WGP-MPXM Katello: Denial of Service and potential information disclosure via SQL injection

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

CVE-2026-4324 Rubygem-katello: katello: denial of service and potential information disclosure via sql injection

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

CVE-2026-4324

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

Katello - Denial of Service and potential information disclosure via SQL injection'

A flaw was found in the Katello plugin for Red Hat Satellite. This vulnerability, caused by improper sanitization of user-provided input, allows a remote attacker to inject arbitrary SQL commands into the sortby parameter of the /api/hosts/bootcimages API endpoint. This can lead to a Denial of...

Red Hat Satellite SQL注入漏洞

Red Hat Satellite is a system management platform developed by Red Hat Inc. This platform can be used to expand Linux infrastructure and provides system management functions such as administration, configuration, and monitoring. Red Hat Satellite 6 has a SQL injection vulnerability, which stems...

MiracleLinux 9 : bootc-1.1.6-3.el9_6 (AXSA:2025-10277:01)

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10277:01 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the...

AlmaLinux 9 : bootc (ALSA-2025:7160)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7160 advisory. rust-openssl: rust openssl ssl::selectnextproto use after free CVE-2025-24898 Tenable has extracted the preceding description block directly from the AlmaLinux...

Fedora: Security Advisory (FEDORA-2025-bdb0ce9d97)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Oracle Linux 9 : bootc (ELSA-2025-7160)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7160 advisory. 1.1.6-3 - Backport https://github.com/containers/bootc/pull/1167 - Resolves: RHEL-82293 1.1.5-2 - Sync specfile from upstream - Resolves: RHEL-80264 - Resolves:...

RHSA-2025:7160 Red Hat Security Advisory: bootc security update

Bulletin has no description...