CVE-2026-4324
1 advisory.
RubyGems/katello CVE-2026-4324: medium 5.4, EPSS 0.45%
Katello: Denial of Service and potential information disclosure via SQL injection
Action: Upgrade katello to 4.19.1 or later.
bundle update katelloAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.19.1 | - |
Fixed versions
| 4.19.1 |
Sources
- osv: GHSA-fwj4-6wgp-mpxm
- https://nvd.nist.gov/vuln/detail/CVE-2026-4324
- https://github.com/Katello/katello/commit/a0a793b08d4f0a897ee985d79a687ad043f99e57
- https://access.redhat.com/errata/RHSA-2026:22326
- https://access.redhat.com/errata/RHSA-2026:5968
- https://access.redhat.com/errata/RHSA-2026:5970
- https://access.redhat.com/security/cve/CVE-2026-4324
- https://bugzilla.redhat.com/show_bug.cgi?id=2448349
- https://github.com/Katello/katello
CVE-2026-4324 · published · modified · JSON