VulnerableCode Package Details - pkg:gem/katello@3.10

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:gem/katello@3.10

Essentials
History (1)

purl	pkg:gem/katello@3.10
Tags	Ghost

Next non-vulnerable version	3.12.2
Latest non-vulnerable version	4.19.1
Risk	3.1

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-asqu-5r9h-9yav Aliases: CVE-2018-14623 GHSA-jx5v-788g-qw58	SQL Injection An SQL injection was found in katello's errata-related API. An authenticated remote attacker can craft input data to force a malformed SQL query to the backend database, which will leak internal IDs. This is issue is related to an incomplete fix for CVE-2016-3072.	3.10.1 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-04-01T16:01:35.388609+00:00	GHSA Importer	Affected by	VCID-asqu-5r9h-9yav	https://github.com/advisories/GHSA-jx5v-788g-qw58	38.0.0