{"action":"Upgrade katello to 4.19.1 or later.","affected":[{"fixed":"4.19.1","introduced":"0"}],"component":"katello","cve_ids":["CVE-2026-4324"],"ecosystem":"RubyGems","epss":0.00278,"exploited":false,"fixed_versions":["4.19.1"],"ghsa_id":"GHSA-fwj4-6wgp-mpxm","id":"tcs_01M5KEK63690NDSN688ZMY28N2","modified_at":"2026-06-01T21:45:26.641319992Z","published_at":"2026-03-17T15:36:23Z","references":["https://osv.dev/vulnerability/GHSA-fwj4-6wgp-mpxm","https://nvd.nist.gov/vuln/detail/CVE-2026-4324","https://github.com/Katello/katello/commit/a0a793b08d4f0a897ee985d79a687ad043f99e57","https://access.redhat.com/errata/RHSA-2026:22326","https://access.redhat.com/errata/RHSA-2026:5968","https://access.redhat.com/errata/RHSA-2026:5970","https://access.redhat.com/security/cve/CVE-2026-4324","https://bugzilla.redhat.com/show_bug.cgi?id=2448349","https://github.com/Katello/katello"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-fwj4-6wgp-mpxm","url":"https://osv.dev/vulnerability/GHSA-fwj4-6wgp-mpxm"}],"summary":"Katello: Denial of Service and potential information disclosure via SQL injection"}