Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@2.1.0-4?arch=el7cf
purl pkg:rpm/redhat/rh-postgresql95-postgresql-pglogical@2.1.0-4?arch=el7cf
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (6)
Vulnerability Summary Fixed by
VCID-5dmr-8tvd-8uen
Aliases:
CVE-2018-11627
GHSA-mq35-wqvf-r23c
Cross-site Scripting Sinatra has XSS via the Bad Request page that occurs upon a params parser exception. There are no reported fixed by versions.
VCID-q4bk-1qay-ffbh
Aliases:
CVE-2018-10905
cfme: Improper access control in dRuby allows local users to execute arbitrary commands as root There are no reported fixed by versions.
VCID-s6cp-dk5r-v3aw
Aliases:
CVE-2018-3760
GHSA-pr3h-jjhj-573x
Information Exposure The package sprockets may leak confidential information. Specially crafted requests can be used to access files that exist on the filesystem that are outside an application's root directory when the server is used in production. All users running an affected release should either upgrade or use one of the work arounds immediately. There are no reported fixed by versions.
VCID-sqa5-8yrd-qyfz
Aliases:
CVE-2018-8048
GHSA-x7rv-cr6v-4vm4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In the Loofah gem for Ruby, denylisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment. There are no reported fixed by versions.
VCID-xby9-avva-a3e5
Aliases:
CVE-2018-3741
GHSA-px3r-jm9g-c8w8
XSS vulnerability The gem allows attributes that are not specified in the allowlist to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. There are no reported fixed by versions.
VCID-zrsc-vqxk-vkgx
Aliases:
CVE-2012-6685
GHSA-6wj9-77wq-jq7p
OSV-90946
Nokogiri is vulnerable to XML External Entity (XXE) attack Nokogiri before 1.5.4 is vulnerable to XXE attacks. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:55:28.662886+00:00 RedHat Importer Affected by VCID-zrsc-vqxk-vkgx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6685.json 38.0.0
2026-04-01T14:25:46.410061+00:00 RedHat Importer Affected by VCID-sqa5-8yrd-qyfz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json 38.0.0
2026-04-01T14:25:45.420318+00:00 RedHat Importer Affected by VCID-xby9-avva-a3e5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3741.json 38.0.0
2026-04-01T14:24:36.658183+00:00 RedHat Importer Affected by VCID-5dmr-8tvd-8uen https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json 38.0.0
2026-04-01T14:23:54.505025+00:00 RedHat Importer Affected by VCID-s6cp-dk5r-v3aw https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3760.json 38.0.0
2026-04-01T14:23:18.107153+00:00 RedHat Importer Affected by VCID-q4bk-1qay-ffbh https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10905.json 38.0.0