Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/python-crypto@2.6.1-16?arch=el7at
purl pkg:rpm/redhat/python-crypto@2.6.1-16?arch=el7at
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (7)
Vulnerability Summary Fixed by
VCID-5dmr-8tvd-8uen
Aliases:
CVE-2018-11627
GHSA-mq35-wqvf-r23c
Cross-site Scripting Sinatra has XSS via the Bad Request page that occurs upon a params parser exception. There are no reported fixed by versions.
VCID-65ha-wgr4-eqd4
Aliases:
CVE-2013-4492
GHSA-r5hc-9xx5-97rw
Reflective XSS Vulnerability When a translation is missing, the HTML exception message raised does not escape the keys. Under certain common configurations this string can contain user input which would allow an attacker to execute a reflective XSS attack. There are no reported fixed by versions.
VCID-rqh3-c53s-vuee
Aliases:
CVE-2017-15125
cloudforms: XSS in self-service UI snapshot feature There are no reported fixed by versions.
VCID-sqa5-8yrd-qyfz
Aliases:
CVE-2018-8048
GHSA-x7rv-cr6v-4vm4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In the Loofah gem for Ruby, denylisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment. There are no reported fixed by versions.
VCID-su5f-8nxh-6fdq
Aliases:
CVE-2017-12191
CFME: VMRC plugin console grants users administrative access There are no reported fixed by versions.
VCID-xby9-avva-a3e5
Aliases:
CVE-2018-3741
GHSA-px3r-jm9g-c8w8
XSS vulnerability The gem allows attributes that are not specified in the allowlist to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. There are no reported fixed by versions.
VCID-zrsc-vqxk-vkgx
Aliases:
CVE-2012-6685
GHSA-6wj9-77wq-jq7p
OSV-90946
Nokogiri is vulnerable to XML External Entity (XXE) attack Nokogiri before 1.5.4 is vulnerable to XXE attacks. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:55:28.750372+00:00 RedHat Importer Affected by VCID-zrsc-vqxk-vkgx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6685.json 38.0.0
2026-04-01T14:49:18.135470+00:00 RedHat Importer Affected by VCID-65ha-wgr4-eqd4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2013-4492.json 38.0.0
2026-04-01T14:26:39.750563+00:00 RedHat Importer Affected by VCID-rqh3-c53s-vuee https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-15125.json 38.0.0
2026-04-01T14:25:57.700158+00:00 RedHat Importer Affected by VCID-su5f-8nxh-6fdq https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2017-12191.json 38.0.0
2026-04-01T14:25:46.458880+00:00 RedHat Importer Affected by VCID-sqa5-8yrd-qyfz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json 38.0.0
2026-04-01T14:25:45.471976+00:00 RedHat Importer Affected by VCID-xby9-avva-a3e5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3741.json 38.0.0
2026-04-01T14:24:36.774071+00:00 RedHat Importer Affected by VCID-5dmr-8tvd-8uen https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json 38.0.0