Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:gem/facter@1.6.14.rc1
purl pkg:gem/facter@1.6.14.rc1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-7ypq-wmb7-quhc
Aliases:
CVE-2014-3248
GHSA-92v7-pq4h-58j5
Moderate severity vulnerability that affects facter, hiera, mcollective-client, and puppet Untrusted search path vulnerability in Puppet Enterprise 2.8 before 2.8.7, Puppet before 2.7.26 and 3.x before 3.6.2, Facter 1.6.x and 2.x before 2.0.2, Hiera before 1.3.4, and Mcollective before 2.5.2, when running with Ruby 1.9.1 or earlier, allows local users to gain privileges via a Trojan horse file in the current working directory, as demonstrated using (1) rubygems/defaults/operating_system.rb, (2) Win32API.rb, (3) Win32API.so, (4) safe_yaml.rb, (5) safe_yaml/deep.rb, or (6) safe_yaml/deep.so; or (7) operatingsystem.rb, (8) operatingsystem.so, (9) osfamily.rb, or (10) osfamily.so in puppet/confine.
1.7.6
Affected by 2 other vulnerabilities.
2.0.2
Affected by 2 other vulnerabilities.
VCID-hzac-k56d-w3cg
Aliases:
CVE-2015-1426
GHSA-j436-h7hm-rx46
Exposure of Sensitive Information to an Unauthorized Actor Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Amazon EC2 node.
2.4.1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:50:45.712892+00:00 GitLab Importer Affected by VCID-hzac-k56d-w3cg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2015-1426.yml 38.4.0
2026-04-16T20:39:44.732402+00:00 GitLab Importer Affected by VCID-7ypq-wmb7-quhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2014-3248.yml 38.4.0
2026-04-16T17:37:13.701949+00:00 Ruby Importer Affected by VCID-7ypq-wmb7-quhc https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2014-3248.yml 38.4.0
2026-04-16T17:35:56.845273+00:00 Ruby Importer Affected by VCID-hzac-k56d-w3cg https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2015-1426.yml 38.4.0
2026-04-11T23:06:52.025530+00:00 GitLab Importer Affected by VCID-hzac-k56d-w3cg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2015-1426.yml 38.3.0
2026-04-11T21:50:30.446382+00:00 GitLab Importer Affected by VCID-7ypq-wmb7-quhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2014-3248.yml 38.3.0
2026-04-11T21:34:05.746675+00:00 Ruby Importer Affected by VCID-7ypq-wmb7-quhc https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2014-3248.yml 38.3.0
2026-04-11T21:32:43.771170+00:00 Ruby Importer Affected by VCID-hzac-k56d-w3cg https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2015-1426.yml 38.3.0
2026-04-02T23:15:03.643120+00:00 GitLab Importer Affected by VCID-hzac-k56d-w3cg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2015-1426.yml 38.1.0
2026-04-02T22:04:20.116093+00:00 GitLab Importer Affected by VCID-7ypq-wmb7-quhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2014-3248.yml 38.1.0
2026-04-02T19:32:27.552957+00:00 Ruby Importer Affected by VCID-7ypq-wmb7-quhc https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2014-3248.yml 38.1.0
2026-04-02T19:31:14.783732+00:00 Ruby Importer Affected by VCID-hzac-k56d-w3cg https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2015-1426.yml 38.1.0
2026-04-01T17:35:04.546127+00:00 GitLab Importer Affected by VCID-hzac-k56d-w3cg https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2015-1426.yml 38.0.0
2026-04-01T16:21:17.135576+00:00 GitLab Importer Affected by VCID-7ypq-wmb7-quhc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/gem/facter/CVE-2014-3248.yml 38.0.0
2026-04-01T15:49:22.748450+00:00 Ruby Importer Affected by VCID-7ypq-wmb7-quhc https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2014-3248.yml 38.0.0
2026-04-01T15:48:02.589476+00:00 Ruby Importer Affected by VCID-hzac-k56d-w3cg https://github.com/rubysec/ruby-advisory-db/blob/master/gems/facter/CVE-2015-1426.yml 38.0.0