csaf_suse - suse-su-2024:0487-1

Vulnerability from csaf_suse

Published

2024-02-15 13:36

Modified

2024-02-15 13:36

Summary

Security update for SUSE Manager Client Tools

Notes

Title of the patch

Security update for SUSE Manager Client Tools

Description of the patch

This update fixes the following issues: golang-github-lusitaniae-apache_exporter: - Do not strip if SUSE Linux Enterprise 15 SP3 - Exclude debug for Red Hat Enterprise Linux >= 8 - Build with Go >= 1.20 when the OS is not Red Hat Enterprise Linux mgr-daemon: - Version 4.3.8-1 * Update translation strings prometheus-postgres_exporter: - Remove duplicated call to systemd requirements - Do not build debug if Red Hat Enterprise Linux >= 8 - Do not strip if SUSE Linux Enterprise 15 SP3 - Build at least with with Go >= 1.18 on Red Hat Enterprise Linux - Build with Go >= 1.20 elsewhere spacecmd: - Version 4.3.26-1 * Update translation strings spacewalk-client-tools: - Version 4.3.18-1 * Update translation strings uyuni-proxy-systemd-services: - Version 4.3.10-1 * Update the image version - Version 4.3.9-1 * Integrate the containerized proxy into the usual rel-eng workflow

Patchnames

SUSE-2024-487,SUSE-SLE-Manager-Tools-15-2024-487,SUSE-SLE-Manager-Tools-For-Micro-5-2024-487,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-487,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-487,openSUSE-SLE-15.5-2024-487

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "Security update for SUSE Manager Client Tools",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "\nThis update fixes the following issues:\n\ngolang-github-lusitaniae-apache_exporter:\n\n- Do not strip if SUSE Linux Enterprise 15 SP3\n- Exclude debug for Red Hat Enterprise Linux >= 8\n- Build with Go >= 1.20 when the OS is not Red Hat Enterprise Linux\n\nmgr-daemon:\n\n- Version 4.3.8-1\n  * Update translation strings\n\nprometheus-postgres_exporter:\n\n- Remove duplicated call to systemd requirements\n- Do not build debug if Red Hat Enterprise Linux >= 8\n- Do not strip if SUSE Linux Enterprise 15 SP3\n- Build at least with with Go >= 1.18 on Red Hat Enterprise Linux\n- Build with Go >= 1.20 elsewhere\n\nspacecmd:\n\n- Version 4.3.26-1\n  * Update translation strings\n\nspacewalk-client-tools:\n\n- Version 4.3.18-1\n  * Update translation strings\n\nuyuni-proxy-systemd-services:\n\n- Version 4.3.10-1\n  * Update the image version\n- Version 4.3.9-1\n  * Integrate the containerized proxy into the usual rel-eng workflow\n\n",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "SUSE-2024-487,SUSE-SLE-Manager-Tools-15-2024-487,SUSE-SLE-Manager-Tools-For-Micro-5-2024-487,SUSE-SLE-Module-SUSE-Manager-Proxy-4.3-2024-487,SUSE-SLE-Module-SUSE-Manager-Server-4.3-2024-487,openSUSE-SLE-15.5-2024-487",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_0487-1.json",
         },
         {
            category: "self",
            summary: "URL for SUSE-SU-2024:0487-1",
            url: "https://www.suse.com/support/update/announcement/2024/suse-su-20240487-1/",
         },
         {
            category: "self",
            summary: "E-Mail link for SUSE-SU-2024:0487-1",
            url: "https://lists.suse.com/pipermail/sle-security-updates/2024-February/017931.html",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192154",
            url: "https://bugzilla.suse.com/1192154",
         },
         {
            category: "self",
            summary: "SUSE Bug 1192696",
            url: "https://bugzilla.suse.com/1192696",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193492",
            url: "https://bugzilla.suse.com/1193492",
         },
         {
            category: "self",
            summary: "SUSE Bug 1193686",
            url: "https://bugzilla.suse.com/1193686",
         },
         {
            category: "self",
            summary: "SUSE Bug 1200480",
            url: "https://bugzilla.suse.com/1200480",
         },
         {
            category: "self",
            summary: "SUSE Bug 1204023",
            url: "https://bugzilla.suse.com/1204023",
         },
         {
            category: "self",
            summary: "SUSE Bug 1218843",
            url: "https://bugzilla.suse.com/1218843",
         },
         {
            category: "self",
            summary: "SUSE Bug 1218844",
            url: "https://bugzilla.suse.com/1218844",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2020-7753 page",
            url: "https://www.suse.com/security/cve/CVE-2020-7753/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-3807 page",
            url: "https://www.suse.com/security/cve/CVE-2021-3807/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-3918 page",
            url: "https://www.suse.com/security/cve/CVE-2021-3918/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-43138 page",
            url: "https://www.suse.com/security/cve/CVE-2021-43138/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-43798 page",
            url: "https://www.suse.com/security/cve/CVE-2021-43798/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2021-43815 page",
            url: "https://www.suse.com/security/cve/CVE-2021-43815/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-0155 page",
            url: "https://www.suse.com/security/cve/CVE-2022-0155/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2022-41715 page",
            url: "https://www.suse.com/security/cve/CVE-2022-41715/",
         },
      ],
      title: "Security update for SUSE Manager Client Tools",
      tracking: {
         current_release_date: "2024-02-15T13:36:26Z",
         generator: {
            date: "2024-02-15T13:36:26Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "SUSE-SU-2024:0487-1",
         initial_release_date: "2024-02-15T13:36:26Z",
         revision_history: [
            {
               date: "2024-02-15T13:36:26Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                        product: {
                           name: "firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                           product_id: "firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                        product: {
                           name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                           product_id: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                        product: {
                           name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                           product_id: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.8-150000.1.60.2.aarch64",
                        product: {
                           name: "grafana-9.5.8-150000.1.60.2.aarch64",
                           product_id: "grafana-9.5.8-150000.1.60.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                        product: {
                           name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                           product_id: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "firewalld-prometheus-config-0.1-150000.3.53.1.i586",
                        product: {
                           name: "firewalld-prometheus-config-0.1-150000.3.53.1.i586",
                           product_id: "firewalld-prometheus-config-0.1-150000.3.53.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.i586",
                        product: {
                           name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.i586",
                           product_id: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.i586",
                        product: {
                           name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.i586",
                           product_id: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.8-150000.1.60.2.i586",
                        product: {
                           name: "grafana-9.5.8-150000.1.60.2.i586",
                           product_id: "grafana-9.5.8-150000.1.60.2.i586",
                        },
                     },
                     {
                        category: "product_version",
                        name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.i586",
                        product: {
                           name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.i586",
                           product_id: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.i586",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "i586",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "mgr-daemon-4.3.8-150000.1.44.1.noarch",
                        product: {
                           name: "mgr-daemon-4.3.8-150000.1.44.1.noarch",
                           product_id: "mgr-daemon-4.3.8-150000.1.44.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                        product: {
                           name: "python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                           product_id: "python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                        product: {
                           name: "python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                           product_id: "python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                        product: {
                           name: "python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                           product_id: "python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacecmd-4.3.26-150000.3.113.1.noarch",
                        product: {
                           name: "spacecmd-4.3.26-150000.3.113.1.noarch",
                           product_id: "spacecmd-4.3.26-150000.3.113.1.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-check-4.3.18-150000.3.86.2.noarch",
                        product: {
                           name: "spacewalk-check-4.3.18-150000.3.86.2.noarch",
                           product_id: "spacewalk-check-4.3.18-150000.3.86.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                        product: {
                           name: "spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                           product_id: "spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                        product: {
                           name: "spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                           product_id: "spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                        },
                     },
                     {
                        category: "product_version",
                        name: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                        product: {
                           name: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                           product_id: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "noarch",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                        product: {
                           name: "firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                           product_id: "firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                        product: {
                           name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                           product_id: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                        product: {
                           name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                           product_id: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.8-150000.1.60.2.ppc64le",
                        product: {
                           name: "grafana-9.5.8-150000.1.60.2.ppc64le",
                           product_id: "grafana-9.5.8-150000.1.60.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                        product: {
                           name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                           product_id: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                        product: {
                           name: "firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                           product_id: "firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                        product: {
                           name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                           product_id: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                        product: {
                           name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                           product_id: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.8-150000.1.60.2.s390x",
                        product: {
                           name: "grafana-9.5.8-150000.1.60.2.s390x",
                           product_id: "grafana-9.5.8-150000.1.60.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                        product: {
                           name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                           product_id: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                        product: {
                           name: "firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                           product_id: "firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                        product: {
                           name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                           product_id: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                        product: {
                           name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                           product_id: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "grafana-9.5.8-150000.1.60.2.x86_64",
                        product: {
                           name: "grafana-9.5.8-150000.1.60.2.x86_64",
                           product_id: "grafana-9.5.8-150000.1.60.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                        product: {
                           name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                           product_id: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "SUSE Manager Client Tools 15",
                        product: {
                           name: "SUSE Manager Client Tools 15",
                           product_id: "SUSE Manager Client Tools 15",
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Client Tools for SLE Micro 5",
                        product: {
                           name: "SUSE Manager Client Tools for SLE Micro 5",
                           product_id: "SUSE Manager Client Tools for SLE Micro 5",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-manager-tools-micro:5",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Proxy Module 4.3",
                        product: {
                           name: "SUSE Manager Proxy Module 4.3",
                           product_id: "SUSE Manager Proxy Module 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-suse-manager-proxy:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "SUSE Manager Server Module 4.3",
                        product: {
                           name: "SUSE Manager Server Module 4.3",
                           product_id: "SUSE Manager Server Module 4.3",
                           product_identification_helper: {
                              cpe: "cpe:/o:suse:sle-module-suse-manager-server:4.3",
                           },
                        },
                     },
                     {
                        category: "product_name",
                        name: "openSUSE Leap 15.5",
                        product: {
                           name: "openSUSE Leap 15.5",
                           product_id: "openSUSE Leap 15.5",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:leap:15.5",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "firewalld-prometheus-config-0.1-150000.3.53.1.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
            },
            product_reference: "firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
            },
            product_reference: "firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "firewalld-prometheus-config-0.1-150000.3.53.1.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
            },
            product_reference: "firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "firewalld-prometheus-config-0.1-150000.3.53.1.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
            },
            product_reference: "firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
            },
            product_reference: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
            },
            product_reference: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
            },
            product_reference: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
            },
            product_reference: "golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.8-150000.1.60.2.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
            },
            product_reference: "grafana-9.5.8-150000.1.60.2.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.8-150000.1.60.2.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
            },
            product_reference: "grafana-9.5.8-150000.1.60.2.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.8-150000.1.60.2.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
            },
            product_reference: "grafana-9.5.8-150000.1.60.2.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "grafana-9.5.8-150000.1.60.2.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
            },
            product_reference: "grafana-9.5.8-150000.1.60.2.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "mgr-daemon-4.3.8-150000.1.44.1.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
            },
            product_reference: "mgr-daemon-4.3.8-150000.1.44.1.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64 as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-check-4.3.18-150000.3.86.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
            },
            product_reference: "python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
            },
            product_reference: "python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
            },
            product_reference: "python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacecmd-4.3.26-150000.3.113.1.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
            },
            product_reference: "spacecmd-4.3.26-150000.3.113.1.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-check-4.3.18-150000.3.86.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
            },
            product_reference: "spacewalk-check-4.3.18-150000.3.86.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-client-setup-4.3.18-150000.3.86.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
            },
            product_reference: "spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacewalk-client-tools-4.3.18-150000.3.86.2.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
            },
            product_reference: "spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch as component of SUSE Manager Client Tools 15",
               product_id: "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
            },
            product_reference: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools 15",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch as component of SUSE Manager Client Tools for SLE Micro 5",
               product_id: "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
            },
            product_reference: "uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
            relates_to_product_reference: "SUSE Manager Client Tools for SLE Micro 5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64 as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64 as component of SUSE Manager Proxy Module 4.3",
               product_id: "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            relates_to_product_reference: "SUSE Manager Proxy Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64 as component of SUSE Manager Server Module 4.3",
               product_id: "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            relates_to_product_reference: "SUSE Manager Server Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le as component of SUSE Manager Server Module 4.3",
               product_id: "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            relates_to_product_reference: "SUSE Manager Server Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x as component of SUSE Manager Server Module 4.3",
               product_id: "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            relates_to_product_reference: "SUSE Manager Server Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64 as component of SUSE Manager Server Module 4.3",
               product_id: "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            relates_to_product_reference: "SUSE Manager Server Module 4.3",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64 as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64 as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            },
            product_reference: "golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64 as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64 as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
            },
            product_reference: "prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "spacecmd-4.3.26-150000.3.113.1.noarch as component of openSUSE Leap 15.5",
               product_id: "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            },
            product_reference: "spacecmd-4.3.26-150000.3.113.1.noarch",
            relates_to_product_reference: "openSUSE Leap 15.5",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2020-7753",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2020-7753",
            },
         ],
         notes: [
            {
               category: "general",
               text: "All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2020-7753",
               url: "https://www.suse.com/security/cve/CVE-2020-7753",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218843 for CVE-2020-7753",
               url: "https://bugzilla.suse.com/1218843",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "important",
            },
         ],
         title: "CVE-2020-7753",
      },
      {
         cve: "CVE-2021-3807",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-3807",
            },
         ],
         notes: [
            {
               category: "general",
               text: "ansi-regex is vulnerable to Inefficient Regular Expression Complexity",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-3807",
               url: "https://www.suse.com/security/cve/CVE-2021-3807",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192154 for CVE-2021-3807",
               url: "https://bugzilla.suse.com/1192154",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "important",
            },
         ],
         title: "CVE-2021-3807",
      },
      {
         cve: "CVE-2021-3918",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-3918",
            },
         ],
         notes: [
            {
               category: "general",
               text: "json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-3918",
               url: "https://www.suse.com/security/cve/CVE-2021-3918",
            },
            {
               category: "external",
               summary: "SUSE Bug 1192696 for CVE-2021-3918",
               url: "https://bugzilla.suse.com/1192696",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 8.1,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "important",
            },
         ],
         title: "CVE-2021-3918",
      },
      {
         cve: "CVE-2021-43138",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-43138",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-43138",
               url: "https://www.suse.com/security/cve/CVE-2021-43138",
            },
            {
               category: "external",
               summary: "SUSE Bug 1200480 for CVE-2021-43138",
               url: "https://bugzilla.suse.com/1200480",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "important",
            },
         ],
         title: "CVE-2021-43138",
      },
      {
         cve: "CVE-2021-43798",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-43798",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-43798",
               url: "https://www.suse.com/security/cve/CVE-2021-43798",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193492 for CVE-2021-43798",
               url: "https://bugzilla.suse.com/1193492",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "important",
            },
         ],
         title: "CVE-2021-43798",
      },
      {
         cve: "CVE-2021-43815",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2021-43815",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability is limited in scope, and only allows access to files with the extension .csv to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Versions 8.3.2 and 7.5.12 contain a patch for this issue. There is a workaround available for users who cannot upgrade. Running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2021-43815",
               url: "https://www.suse.com/security/cve/CVE-2021-43815",
            },
            {
               category: "external",
               summary: "SUSE Bug 1193686 for CVE-2021-43815",
               url: "https://bugzilla.suse.com/1193686",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2021-43815",
      },
      {
         cve: "CVE-2022-0155",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-0155",
            },
         ],
         notes: [
            {
               category: "general",
               text: "follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-0155",
               url: "https://www.suse.com/security/cve/CVE-2022-0155",
            },
            {
               category: "external",
               summary: "SUSE Bug 1218844 for CVE-2022-0155",
               url: "https://bugzilla.suse.com/1218844",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-0155",
      },
      {
         cve: "CVE-2022-41715",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2022-41715",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
               "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
               "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
               "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
               "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
               "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
               "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
               "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
               "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2022-41715",
               url: "https://www.suse.com/security/cve/CVE-2022-41715",
            },
            {
               category: "external",
               summary: "SUSE Bug 1204023 for CVE-2022-41715",
               url: "https://bugzilla.suse.com/1204023",
            },
            {
               category: "external",
               summary: "SUSE Bug 1208441 for CVE-2022-41715",
               url: "https://bugzilla.suse.com/1208441",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.2,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:firewalld-prometheus-config-0.1-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.aarch64",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.ppc64le",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.s390x",
                  "SUSE Manager Client Tools 15:golang-github-prometheus-prometheus-2.45.0-150000.3.53.1.x86_64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.aarch64",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.ppc64le",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.s390x",
                  "SUSE Manager Client Tools 15:grafana-9.5.8-150000.1.60.2.x86_64",
                  "SUSE Manager Client Tools 15:mgr-daemon-4.3.8-150000.1.44.1.noarch",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "SUSE Manager Client Tools 15:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "SUSE Manager Client Tools 15:python3-spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:python3-spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacecmd-4.3.26-150000.3.113.1.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-check-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-setup-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:spacewalk-client-tools-4.3.18-150000.3.86.2.noarch",
                  "SUSE Manager Client Tools 15:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Client Tools for SLE Micro 5:uyuni-proxy-systemd-services-4.3.10-150000.1.15.1.noarch",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Proxy Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "SUSE Manager Server Module 4.3:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.aarch64",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.ppc64le",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.s390x",
                  "openSUSE Leap 15.5:golang-github-lusitaniae-apache_exporter-1.0.0-150000.1.20.1.x86_64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.aarch64",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.ppc64le",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.s390x",
                  "openSUSE Leap 15.5:prometheus-postgres_exporter-0.10.1-150000.1.17.1.x86_64",
                  "openSUSE Leap 15.5:spacecmd-4.3.26-150000.3.113.1.noarch",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-02-15T13:36:26Z",
               details: "moderate",
            },
         ],
         title: "CVE-2022-41715",
      },
   ],
}

cve-2020-7753

Vulnerability from cvelistv5

Published

2020-10-27 08:15

Modified

2024-09-16 22:03

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().

References

▼	URL	Tags
	https://snyk.io/vuln/SNYK-JS-TRIM-1017038	x_refsource_MISC
	https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132	x_refsource_MISC
	https://github.com/component/trim/blob/master/index.js%23L6	x_refsource_MISC
	https://lists.apache.org/thread.html/r75b8d0b88833d7d96afcdce3ead65e212572ead4e7a9f34d21040196%40%3Ccommits.airflow.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r10faad1ef9166d37a1a5c9142b1af7099b8ecdc5ad05c51b8ea993d9%40%3Ccommits.airflow.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/r51ff3c2a4c7b8402f321eae7e624672cc2295c7bc8c12c8b871f6b0b%40%3Ccommits.airflow.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rb8462df3b6484e778905c09cd49a8912e1a302659860017ebe36da03%40%3Ccommits.airflow.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/rcc7c2865a52b544a8e49386c6880e9b9ab29bfce1052b5569d09ee4a%40%3Ccommits.airflow.apache.org%3E	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	trim	Version: 0 < unspecified

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T09:41:01.526Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://snyk.io/vuln/SNYK-JS-TRIM-1017038",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/component/trim/blob/master/index.js%23L6",
               },
               {
                  name: "[airflow-commits] 20210511 [GitHub] [airflow] kaxil opened a new pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r75b8d0b88833d7d96afcdce3ead65e212572ead4e7a9f34d21040196%40%3Ccommits.airflow.apache.org%3E",
               },
               {
                  name: "[airflow-commits] 20210511 [GitHub] [airflow] ryanahamilton commented on pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r10faad1ef9166d37a1a5c9142b1af7099b8ecdc5ad05c51b8ea993d9%40%3Ccommits.airflow.apache.org%3E",
               },
               {
                  name: "[airflow-commits] 20210511 [GitHub] [airflow] kaxil closed pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/r51ff3c2a4c7b8402f321eae7e624672cc2295c7bc8c12c8b871f6b0b%40%3Ccommits.airflow.apache.org%3E",
               },
               {
                  name: "[airflow-commits] 20210511 [GitHub] [airflow] github-actions[bot] commented on pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rb8462df3b6484e778905c09cd49a8912e1a302659860017ebe36da03%40%3Ccommits.airflow.apache.org%3E",
               },
               {
                  name: "[airflow-commits] 20210511 [GitHub] [airflow] ryanahamilton closed pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/rcc7c2865a52b544a8e49386c6880e9b9ab29bfce1052b5569d09ee4a%40%3Ccommits.airflow.apache.org%3E",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "trim",
               vendor: "n/a",
               versions: [
                  {
                     lessThan: "unspecified",
                     status: "affected",
                     version: "0",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Liyuan Chen",
            },
         ],
         datePublic: "2020-10-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Regular Expression Denial of Service (ReDoS)",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-05-12T00:06:17",
            orgId: "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
            shortName: "snyk",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://snyk.io/vuln/SNYK-JS-TRIM-1017038",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/component/trim/blob/master/index.js%23L6",
            },
            {
               name: "[airflow-commits] 20210511 [GitHub] [airflow] kaxil opened a new pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r75b8d0b88833d7d96afcdce3ead65e212572ead4e7a9f34d21040196%40%3Ccommits.airflow.apache.org%3E",
            },
            {
               name: "[airflow-commits] 20210511 [GitHub] [airflow] ryanahamilton commented on pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r10faad1ef9166d37a1a5c9142b1af7099b8ecdc5ad05c51b8ea993d9%40%3Ccommits.airflow.apache.org%3E",
            },
            {
               name: "[airflow-commits] 20210511 [GitHub] [airflow] kaxil closed pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/r51ff3c2a4c7b8402f321eae7e624672cc2295c7bc8c12c8b871f6b0b%40%3Ccommits.airflow.apache.org%3E",
            },
            {
               name: "[airflow-commits] 20210511 [GitHub] [airflow] github-actions[bot] commented on pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rb8462df3b6484e778905c09cd49a8912e1a302659860017ebe36da03%40%3Ccommits.airflow.apache.org%3E",
            },
            {
               name: "[airflow-commits] 20210511 [GitHub] [airflow] ryanahamilton closed pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/rcc7c2865a52b544a8e49386c6880e9b9ab29bfce1052b5569d09ee4a%40%3Ccommits.airflow.apache.org%3E",
            },
         ],
         title: "Regular Expression Denial of Service (ReDoS)",
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "report@snyk.io",
               DATE_PUBLIC: "2020-10-27T08:12:13.243968Z",
               ID: "CVE-2020-7753",
               STATE: "PUBLIC",
               TITLE: "Regular Expression Denial of Service (ReDoS)",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "trim",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: ">=",
                                          version_value: "0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            credit: [
               {
                  lang: "eng",
                  value: "Liyuan Chen",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "All versions of package trim are vulnerable to Regular Expression Denial of Service (ReDoS) via trim().",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Regular Expression Denial of Service (ReDoS)",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://snyk.io/vuln/SNYK-JS-TRIM-1017038",
                     refsource: "MISC",
                     url: "https://snyk.io/vuln/SNYK-JS-TRIM-1017038",
                  },
                  {
                     name: "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132",
                     refsource: "MISC",
                     url: "https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1022132",
                  },
                  {
                     name: "https://github.com/component/trim/blob/master/index.js%23L6",
                     refsource: "MISC",
                     url: "https://github.com/component/trim/blob/master/index.js%23L6",
                  },
                  {
                     name: "[airflow-commits] 20210511 [GitHub] [airflow] kaxil opened a new pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r75b8d0b88833d7d96afcdce3ead65e212572ead4e7a9f34d21040196@%3Ccommits.airflow.apache.org%3E",
                  },
                  {
                     name: "[airflow-commits] 20210511 [GitHub] [airflow] ryanahamilton commented on pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r10faad1ef9166d37a1a5c9142b1af7099b8ecdc5ad05c51b8ea993d9@%3Ccommits.airflow.apache.org%3E",
                  },
                  {
                     name: "[airflow-commits] 20210511 [GitHub] [airflow] kaxil closed pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/r51ff3c2a4c7b8402f321eae7e624672cc2295c7bc8c12c8b871f6b0b@%3Ccommits.airflow.apache.org%3E",
                  },
                  {
                     name: "[airflow-commits] 20210511 [GitHub] [airflow] github-actions[bot] commented on pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rb8462df3b6484e778905c09cd49a8912e1a302659860017ebe36da03@%3Ccommits.airflow.apache.org%3E",
                  },
                  {
                     name: "[airflow-commits] 20210511 [GitHub] [airflow] ryanahamilton closed pull request #15782: Bump ``trim`` to fix ``CVE-2020-7753``",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/rcc7c2865a52b544a8e49386c6880e9b9ab29bfce1052b5569d09ee4a@%3Ccommits.airflow.apache.org%3E",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "bae035ff-b466-4ff4-94d0-fc9efd9e1730",
      assignerShortName: "snyk",
      cveId: "CVE-2020-7753",
      datePublished: "2020-10-27T08:15:15.542691Z",
      dateReserved: "2020-01-21T00:00:00",
      dateUpdated: "2024-09-16T22:03:06.008Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-43815

Vulnerability from cvelistv5

Published

2021-12-10 20:40

Modified

2024-08-04 04:03

Severity ?

4.3 (Medium) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Summary

Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability is limited in scope, and only allows access to files with the extension .csv to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Versions 8.3.2 and 7.5.12 contain a patch for this issue. There is a workaround available for users who cannot upgrade. Running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths.

References

▼	URL	Tags
	https://github.com/grafana/grafana/commit/fd48aee61e4328aae8d5303a9efd045fa0ca308d	x_refsource_MISC
	https://grafana.com/blog/2021/12/10/grafana-8.3.2-and-7.5.12-released-with-moderate-severity-security-fix/	x_refsource_MISC
	https://github.com/grafana/grafana/security/advisories/GHSA-7533-c8qv-jm9m	x_refsource_CONFIRM
	https://github.com/grafana/grafana/commit/d6ec6f8ad28f0212e584406730f939105ff6c6d3	x_refsource_MISC
	https://github.com/grafana/grafana/releases/tag/v8.3.2	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2021/12/10/4	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20220107-0006/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	grafana	grafana	Version: >= 8.0.0-beta3, < 8.3.2 Version: >= 5.0.0, < 7.5.12

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:03:08.839Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/grafana/commit/fd48aee61e4328aae8d5303a9efd045fa0ca308d",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://grafana.com/blog/2021/12/10/grafana-8.3.2-and-7.5.12-released-with-moderate-severity-security-fix/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/grafana/security/advisories/GHSA-7533-c8qv-jm9m",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/grafana/commit/d6ec6f8ad28f0212e584406730f939105ff6c6d3",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/grafana/releases/tag/v8.3.2",
               },
               {
                  name: "[oss-security] 20211210 CVE-2021-43813 and CVE-2021-43815 - Grafana directory traversal for some .md and .csv files",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/12/10/4",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20220107-0006/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "grafana",
               vendor: "grafana",
               versions: [
                  {
                     status: "affected",
                     version: ">= 8.0.0-beta3, < 8.3.2",
                  },
                  {
                     status: "affected",
                     version: ">= 5.0.0, < 7.5.12",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability is limited in scope, and only allows access to files with the extension .csv to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Versions 8.3.2 and 7.5.12 contain a patch for this issue. There is a workaround available for users who cannot upgrade. Running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-22",
                     description: "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-01-07T12:06:29",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/grafana/grafana/commit/fd48aee61e4328aae8d5303a9efd045fa0ca308d",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://grafana.com/blog/2021/12/10/grafana-8.3.2-and-7.5.12-released-with-moderate-severity-security-fix/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/grafana/grafana/security/advisories/GHSA-7533-c8qv-jm9m",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/grafana/grafana/commit/d6ec6f8ad28f0212e584406730f939105ff6c6d3",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/grafana/grafana/releases/tag/v8.3.2",
            },
            {
               name: "[oss-security] 20211210 CVE-2021-43813 and CVE-2021-43815 - Grafana directory traversal for some .md and .csv files",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/12/10/4",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20220107-0006/",
            },
         ],
         source: {
            advisory: "GHSA-7533-c8qv-jm9m",
            discovery: "UNKNOWN",
         },
         title: "Grafana directory traversal for `.cvs` files",
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security-advisories@github.com",
               ID: "CVE-2021-43815",
               STATE: "PUBLIC",
               TITLE: "Grafana directory traversal for `.cvs` files",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "grafana",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: ">= 8.0.0-beta3, < 8.3.2",
                                       },
                                       {
                                          version_value: ">= 5.0.0, < 7.5.12",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "grafana",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a directory traversal for arbitrary .csv files. It only affects instances that have the developer testing tool called TestData DB data source enabled and configured. The vulnerability is limited in scope, and only allows access to files with the extension .csv to authenticated users only. Grafana Cloud instances have not been affected by the vulnerability. Versions 8.3.2 and 7.5.12 contain a patch for this issue. There is a workaround available for users who cannot upgrade. Running a reverse proxy in front of Grafana that normalizes the PATH of the request will mitigate the vulnerability. The proxy will have to also be able to handle url encoded paths.",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.3,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "NONE",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/grafana/grafana/commit/fd48aee61e4328aae8d5303a9efd045fa0ca308d",
                     refsource: "MISC",
                     url: "https://github.com/grafana/grafana/commit/fd48aee61e4328aae8d5303a9efd045fa0ca308d",
                  },
                  {
                     name: "https://grafana.com/blog/2021/12/10/grafana-8.3.2-and-7.5.12-released-with-moderate-severity-security-fix/",
                     refsource: "MISC",
                     url: "https://grafana.com/blog/2021/12/10/grafana-8.3.2-and-7.5.12-released-with-moderate-severity-security-fix/",
                  },
                  {
                     name: "https://github.com/grafana/grafana/security/advisories/GHSA-7533-c8qv-jm9m",
                     refsource: "CONFIRM",
                     url: "https://github.com/grafana/grafana/security/advisories/GHSA-7533-c8qv-jm9m",
                  },
                  {
                     name: "https://github.com/grafana/grafana/commit/d6ec6f8ad28f0212e584406730f939105ff6c6d3",
                     refsource: "MISC",
                     url: "https://github.com/grafana/grafana/commit/d6ec6f8ad28f0212e584406730f939105ff6c6d3",
                  },
                  {
                     name: "https://github.com/grafana/grafana/releases/tag/v8.3.2",
                     refsource: "MISC",
                     url: "https://github.com/grafana/grafana/releases/tag/v8.3.2",
                  },
                  {
                     name: "[oss-security] 20211210 CVE-2021-43813 and CVE-2021-43815 - Grafana directory traversal for some .md and .csv files",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2021/12/10/4",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20220107-0006/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20220107-0006/",
                  },
               ],
            },
            source: {
               advisory: "GHSA-7533-c8qv-jm9m",
               discovery: "UNKNOWN",
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2021-43815",
      datePublished: "2021-12-10T20:40:11",
      dateReserved: "2021-11-16T00:00:00",
      dateUpdated: "2024-08-04T04:03:08.839Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-43798

Vulnerability from cvelistv5

Published

2021-12-07 18:25

Modified

2024-08-04 04:03

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.

References

▼	URL	Tags
	https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p	x_refsource_CONFIRM
	https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce	x_refsource_MISC
	http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html	x_refsource_MISC
	https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/	x_refsource_CONFIRM
	http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2021/12/09/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2021/12/10/4	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20211229-0004/	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	grafana	grafana	Version: >= 8.0.0, < 8.0.7 Version: >= 8.1.0, < 8.1.8 Version: >= 8.2.0, < 8.2.7 Version: = 8.3.0

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T04:03:08.797Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html",
               },
               {
                  name: "[oss-security] 20211209 CVE-2021-43798 Grafana directory traversal",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/12/09/2",
               },
               {
                  name: "[oss-security] 20211210 CVE-2021-43813 and CVE-2021-43815 - Grafana directory traversal for some .md and .csv files",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2021/12/10/4",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20211229-0004/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "grafana",
               vendor: "grafana",
               versions: [
                  {
                     status: "affected",
                     version: ">= 8.0.0, < 8.0.7",
                  },
                  {
                     status: "affected",
                     version: ">= 8.1.0, < 8.1.8",
                  },
                  {
                     status: "affected",
                     version: ">= 8.2.0, < 8.2.7",
                  },
                  {
                     status: "affected",
                     version: "= 8.3.0",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-22",
                     description: "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2021-12-29T20:06:36",
            orgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
            shortName: "GitHub_M",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html",
            },
            {
               name: "[oss-security] 20211209 CVE-2021-43798 Grafana directory traversal",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/12/09/2",
            },
            {
               name: "[oss-security] 20211210 CVE-2021-43813 and CVE-2021-43815 - Grafana directory traversal for some .md and .csv files",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2021/12/10/4",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20211229-0004/",
            },
         ],
         source: {
            advisory: "GHSA-8pjx-jj86-j47p",
            discovery: "UNKNOWN",
         },
         title: "Grafana path traversal",
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security-advisories@github.com",
               ID: "CVE-2021-43798",
               STATE: "PUBLIC",
               TITLE: "Grafana path traversal",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "grafana",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: ">= 8.0.0, < 8.0.7",
                                       },
                                       {
                                          version_value: ">= 8.1.0, < 8.1.8",
                                       },
                                       {
                                          version_value: ">= 8.2.0, < 8.2.7",
                                       },
                                       {
                                          version_value: "= 8.3.0",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "grafana",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except for patched versions) iss vulnerable to directory traversal, allowing access to local files. The vulnerable URL path is: `<grafana_host_url>/public/plugins//`, where is the plugin ID for any installed plugin. At no time has Grafana Cloud been vulnerable. Users are advised to upgrade to patched versions 8.0.7, 8.1.8, 8.2.7, or 8.3.1. The GitHub Security Advisory contains more information about vulnerable URL paths, mitigation, and the disclosure timeline.",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p",
                     refsource: "CONFIRM",
                     url: "https://github.com/grafana/grafana/security/advisories/GHSA-8pjx-jj86-j47p",
                  },
                  {
                     name: "https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce",
                     refsource: "MISC",
                     url: "https://github.com/grafana/grafana/commit/c798c0e958d15d9cc7f27c72113d572fa58545ce",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/165198/Grafana-Arbitrary-File-Reading.html",
                  },
                  {
                     name: "https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/",
                     refsource: "CONFIRM",
                     url: "https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/165221/Grafana-8.3.0-Directory-Traversal-Arbitrary-File-Read.html",
                  },
                  {
                     name: "[oss-security] 20211209 CVE-2021-43798 Grafana directory traversal",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2021/12/09/2",
                  },
                  {
                     name: "[oss-security] 20211210 CVE-2021-43813 and CVE-2021-43815 - Grafana directory traversal for some .md and .csv files",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2021/12/10/4",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20211229-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20211229-0004/",
                  },
               ],
            },
            source: {
               advisory: "GHSA-8pjx-jj86-j47p",
               discovery: "UNKNOWN",
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a0819718-46f1-4df5-94e2-005712e83aaa",
      assignerShortName: "GitHub_M",
      cveId: "CVE-2021-43798",
      datePublished: "2021-12-07T18:25:10",
      dateReserved: "2021-11-16T00:00:00",
      dateUpdated: "2024-08-04T04:03:08.797Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-0155

Vulnerability from cvelistv5

Published

2022-01-10 19:30

Modified

2024-08-02 23:18

Severity ?

8.0 (High) - CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Summary

follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor

References

▼	URL	Tags
	https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406	x_refsource_CONFIRM
	https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22	x_refsource_MISC
	https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf	x_refsource_CONFIRM

Impacted products

	Vendor	Product	Version
	follow-redirects	follow-redirects/follow-redirects	Version: unspecified < 1.14.7

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-02T23:18:42.041Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "follow-redirects/follow-redirects",
               vendor: "follow-redirects",
               versions: [
                  {
                     lessThan: "1.14.7",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-359",
                     description: "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-09-13T11:06:25",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntrdev",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
            },
         ],
         source: {
            advisory: "fc524e4b-ebb6-427d-ab67-a64181020406",
            discovery: "EXTERNAL",
         },
         title: "Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects",
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@huntr.dev",
               ID: "CVE-2022-0155",
               STATE: "PUBLIC",
               TITLE: "Exposure of Private Personal Information to an Unauthorized Actor in follow-redirects/follow-redirects",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "follow-redirects/follow-redirects",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "<",
                                          version_value: "1.14.7",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "follow-redirects",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "follow-redirects is vulnerable to Exposure of Private Personal Information to an Unauthorized Actor",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-359 Exposure of Private Personal Information to an Unauthorized Actor",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406",
                     refsource: "CONFIRM",
                     url: "https://huntr.dev/bounties/fc524e4b-ebb6-427d-ab67-a64181020406",
                  },
                  {
                     name: "https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22",
                     refsource: "MISC",
                     url: "https://github.com/follow-redirects/follow-redirects/commit/8b347cbcef7c7b72a6e9be20f5710c17d6163c22",
                  },
                  {
                     name: "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
                     refsource: "CONFIRM",
                     url: "https://cert-portal.siemens.com/productcert/pdf/ssa-637483.pdf",
                  },
               ],
            },
            source: {
               advisory: "fc524e4b-ebb6-427d-ab67-a64181020406",
               discovery: "EXTERNAL",
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntrdev",
      cveId: "CVE-2022-0155",
      datePublished: "2022-01-10T19:30:10",
      dateReserved: "2022-01-07T00:00:00",
      dateUpdated: "2024-08-02T23:18:42.041Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-3918

Vulnerability from cvelistv5

Published

2021-11-13 00:00

Modified

2025-01-17 20:02

Severity ?

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

References

▼	URL	Tags
	https://huntr.dev/bounties/bb6ccd63-f505-4e3a-b55f-cd2662c261a9
	https://github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741
	https://lists.debian.org/debian-lts-announce/2022/12/msg00013.html	mailing-list

Impacted products

	Vendor	Product	Version
	kriszyp	kriszyp/json-schema	Version: unspecified <

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2025-01-17T20:02:47.966Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://huntr.dev/bounties/bb6ccd63-f505-4e3a-b55f-cd2662c261a9",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741",
               },
               {
                  name: "[debian-lts-announce] 20221206 [SECURITY] [DLA 3228-1] node-json-schema security update",
                  tags: [
                     "mailing-list",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2022/12/msg00013.html",
               },
               {
                  url: "https://security.netapp.com/advisory/ntap-20250117-0004/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "kriszyp/json-schema",
               vendor: "kriszyp",
               versions: [
                  {
                     lessThanOrEqual: "0.3.0",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "json-schema is vulnerable to Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1321",
                     description: "CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-12-06T00:00:00",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntrdev",
         },
         references: [
            {
               url: "https://huntr.dev/bounties/bb6ccd63-f505-4e3a-b55f-cd2662c261a9",
            },
            {
               url: "https://github.com/kriszyp/json-schema/commit/22f146111f541d9737e832823699ad3528ca7741",
            },
            {
               name: "[debian-lts-announce] 20221206 [SECURITY] [DLA 3228-1] node-json-schema security update",
               tags: [
                  "mailing-list",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2022/12/msg00013.html",
            },
         ],
         source: {
            advisory: "bb6ccd63-f505-4e3a-b55f-cd2662c261a9",
            discovery: "EXTERNAL",
         },
         title: "Prototype Pollution in kriszyp/json-schema",
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntrdev",
      cveId: "CVE-2021-3918",
      datePublished: "2021-11-13T00:00:00",
      dateReserved: "2021-11-02T00:00:00",
      dateUpdated: "2025-01-17T20:02:47.966Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-3807

Vulnerability from cvelistv5

Published

2021-09-17 00:00

Modified

2024-08-03 17:09

Severity ?

7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

ansi-regex is vulnerable to Inefficient Regular Expression Complexity

References

▼	URL	Tags
	https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994
	https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9
	https://www.oracle.com/security-alerts/cpuapr2022.html
	https://security.netapp.com/advisory/ntap-20221014-0002/

Impacted products

	Vendor	Product	Version
	chalk	chalk/ansi-regex	Version: unspecified < 6.0.1 Version: unspecified < 5.0.1

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T17:09:08.762Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20221014-0002/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "chalk/ansi-regex",
               vendor: "chalk",
               versions: [
                  {
                     lessThan: "6.0.1",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "5.0.1",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     status: "unaffected",
                     version: "5.0.1",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "ansi-regex is vulnerable to Inefficient Regular Expression Complexity",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-1333",
                     description: "CWE-1333 Inefficient Regular Expression Complexity",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-10-14T00:00:00",
            orgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
            shortName: "@huntrdev",
         },
         references: [
            {
               url: "https://huntr.dev/bounties/5b3cf33b-ede0-4398-9974-800876dfd994",
            },
            {
               url: "https://github.com/chalk/ansi-regex/commit/8d1d7cdb586269882c4bdc1b7325d0c58c8f76f9",
            },
            {
               url: "https://www.oracle.com/security-alerts/cpuapr2022.html",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20221014-0002/",
            },
         ],
         source: {
            advisory: "5b3cf33b-ede0-4398-9974-800876dfd994",
            discovery: "EXTERNAL",
         },
         title: "Inefficient Regular Expression Complexity in chalk/ansi-regex",
      },
   },
   cveMetadata: {
      assignerOrgId: "c09c270a-b464-47c1-9133-acb35b22c19a",
      assignerShortName: "@huntrdev",
      cveId: "CVE-2021-3807",
      datePublished: "2021-09-17T00:00:00",
      dateReserved: "2021-09-16T00:00:00",
      dateUpdated: "2024-08-03T17:09:08.762Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2022-41715

Vulnerability from cvelistv5

Published

2022-10-14 00:00

Modified

2025-02-13 16:33

Severity ?

Summary

Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.

References

▼	URL	Tags
	https://go.dev/issue/55949
	https://go.dev/cl/439356
	https://groups.google.com/g/golang-announce/c/xtuG5faxtaU
	https://pkg.go.dev/vuln/GO-2022-1039
	https://security.gentoo.org/glsa/202311-09

Impacted products

	Vendor	Product	Version
	Go standard library	regexp/syntax	Version: 0 ≤ Version: 1.19.0-0 ≤

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-03T12:49:43.550Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://go.dev/issue/55949",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://go.dev/cl/439356",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://groups.google.com/g/golang-announce/c/xtuG5faxtaU",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://pkg.go.dev/vuln/GO-2022-1039",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202311-09",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               collectionURL: "https://pkg.go.dev",
               defaultStatus: "unaffected",
               packageName: "regexp/syntax",
               product: "regexp/syntax",
               programRoutines: [
                  {
                     name: "parser.push",
                  },
                  {
                     name: "parser.repeat",
                  },
                  {
                     name: "parser.factor",
                  },
                  {
                     name: "parse",
                  },
                  {
                     name: "Parse",
                  },
               ],
               vendor: "Go standard library",
               versions: [
                  {
                     lessThan: "1.18.7",
                     status: "affected",
                     version: "0",
                     versionType: "semver",
                  },
                  {
                     lessThan: "1.19.2",
                     status: "affected",
                     version: "1.19.0-0",
                     versionType: "semver",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Adam Korczynski (ADA Logics)",
            },
            {
               lang: "en",
               value: "OSS-Fuzz",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Programs which compile regular expressions from untrusted sources may be vulnerable to memory exhaustion or denial of service. The parsed regexp representation is linear in the size of the input, but in some cases the constant factor can be as high as 40,000, making relatively small regexps consume much larger amounts of memory. After fix, each regexp being parsed is limited to a 256 MB memory footprint. Regular expressions whose representation would use more space than that are rejected. Normal use of regular expressions is unaffected.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "CWE 400: Uncontrolled Resource Consumption",
                     lang: "en",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2023-11-25T11:09:55.534Z",
            orgId: "1bb62c36-49e3-4200-9d77-64a1400537cc",
            shortName: "Go",
         },
         references: [
            {
               url: "https://go.dev/issue/55949",
            },
            {
               url: "https://go.dev/cl/439356",
            },
            {
               url: "https://groups.google.com/g/golang-announce/c/xtuG5faxtaU",
            },
            {
               url: "https://pkg.go.dev/vuln/GO-2022-1039",
            },
            {
               url: "https://security.gentoo.org/glsa/202311-09",
            },
         ],
         title: "Memory exhaustion when compiling regular expressions in regexp/syntax",
      },
   },
   cveMetadata: {
      assignerOrgId: "1bb62c36-49e3-4200-9d77-64a1400537cc",
      assignerShortName: "Go",
      cveId: "CVE-2022-41715",
      datePublished: "2022-10-14T00:00:00.000Z",
      dateReserved: "2022-09-28T00:00:00.000Z",
      dateUpdated: "2025-02-13T16:33:07.652Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2021-43138

Vulnerability from cvelistv5

Published

2022-04-06 00:00

Modified

2024-08-04 03:47

Severity ?

Summary

In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.

References

▼	URL	Tags
	https://github.com/caolan/async/blob/master/lib/internal/iterator.js
	https://github.com/caolan/async/blob/master/lib/mapValuesLimit.js
	https://jsfiddle.net/oz5twjd9/
	https://github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d
	https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md#v264
	https://github.com/caolan/async/pull/1828
	https://github.com/caolan/async/compare/v2.6.3...v2.6.4
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/	vendor-advisory
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/	vendor-advisory
	https://security.netapp.com/advisory/ntap-20240621-0006/

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T03:47:13.575Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/caolan/async/blob/master/lib/internal/iterator.js",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/caolan/async/blob/master/lib/mapValuesLimit.js",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://jsfiddle.net/oz5twjd9/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md#v264",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/caolan/async/pull/1828",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://github.com/caolan/async/compare/v2.6.3...v2.6.4",
               },
               {
                  name: "FEDORA-2023-ce8943223c",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/",
               },
               {
                  name: "FEDORA-2023-18fd476362",
                  tags: [
                     "vendor-advisory",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/",
               },
               {
                  tags: [
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20240621-0006/",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "In Async before 2.6.4 and 3.x before 3.2.2, a malicious user can obtain privileges via the mapValues() method, aka lib/internal/iterator.js createObjectIterator prototype pollution.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2024-06-21T19:07:23.908408",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               url: "https://github.com/caolan/async/blob/master/lib/internal/iterator.js",
            },
            {
               url: "https://github.com/caolan/async/blob/master/lib/mapValuesLimit.js",
            },
            {
               url: "https://jsfiddle.net/oz5twjd9/",
            },
            {
               url: "https://github.com/caolan/async/commit/e1ecdbf79264f9ab488c7799f4c76996d5dca66d",
            },
            {
               url: "https://github.com/caolan/async/blob/v2.6.4/CHANGELOG.md#v264",
            },
            {
               url: "https://github.com/caolan/async/pull/1828",
            },
            {
               url: "https://github.com/caolan/async/compare/v2.6.3...v2.6.4",
            },
            {
               name: "FEDORA-2023-ce8943223c",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MTEUUTNIEBHGKUKKLNUZSV7IEP6IP3Q3/",
            },
            {
               name: "FEDORA-2023-18fd476362",
               tags: [
                  "vendor-advisory",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UM6XJ73Q3NAM5KSGCOKJ2ZIA6GUWUJLK/",
            },
            {
               url: "https://security.netapp.com/advisory/ntap-20240621-0006/",
            },
         ],
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2021-43138",
      datePublished: "2022-04-06T00:00:00",
      dateReserved: "2021-11-01T00:00:00",
      dateUpdated: "2024-08-04T03:47:13.575Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_suse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature