HIGH8.8RubyGems
GHSA-527r-mfmj-prqf· CVE-2016-3072Katello SQL Injection vulnerabilities
Modified: 11/8/2023
package
RubyGems/katello
pkg:rubygems/katello
CRITICAL9.8RubyGems
GHSA-5xv2-q475-rwrh· CVE-2012-3503Katello uses hard coded credential
Modified: 4/11/2024
MEDIUM4.3RubyGems
GHSA-c43c-rf7g-5xpg· CVE-2026-12515katello: missing repository authorization in content_uploads exposes cross-product content existence
Modified: 8/5/2026
MEDIUM4.3RubyGems
GHSA-cpv6-pfq6-j2v7· CVE-2017-2662katello Improper Privilege Management vulnerability
Modified: 11/8/2023
MEDIUM5.4RubyGems
GHSA-fwj4-6wgp-mpxm· CVE-2026-4324Katello: Denial of Service and potential information disclosure via SQL injection
Modified: 6/1/2026
MEDIUM4.3RubyGems
GHSA-jx5v-788g-qw58· CVE-2018-14623katello SQL Injection vulnerability
Modified: 11/8/2023
LOW2.7RubyGems
GHSA-m4wh-848j-9w2r· CVE-2019-14825Katello cleartext password storage issue
Modified: 11/8/2023
MEDIUM5.4RubyGems
GHSA-mhhc-r88h-2qrm· CVE-2018-16887katello Cross-site Scripting vulnerability
Modified: 11/8/2023