How many CVEs have a located fix in theforeman/foreman?

14 published CVEs have a fix traced to functions in theforeman/foreman, touching 41 functions across 30 files.

Which function in theforeman/foreman has been patched by the most CVEs?

taxable_ids in app/models/concerns/taxonomix.rb has been changed by 2 CVE fixes, from 2015 to 2017.

How large is a typical CVE fix in theforeman/foreman?

The median fix changes 17 lines. 64% of fixes change 20 lines or fewer, and 29% change a single function.

How is a fix located to a function?

The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

RadicalNotion.AI

Log in Create an account

ruby

javascript

#412 of 500 repositories

theforeman/foreman

Name: theforeman/foreman: functions patched by CVE fixes
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Functions and files changed by CVE fixes in this repository.

Latest located fix September 22, 2023

14

CVE fixes located

Published CVEs

41

Functions patched

Distinct function sites

30

Files patched

Distinct source files

2014–2023

Years covered

By CVE publication date

Overview

14 published CVEs have a fix traced to functions in theforeman/foreman, the earliest published in 2014. Those fixes changed 41 distinct functions across 30 files, in 72 patch hunks.

Among the 500 repositories tracked here, theforeman/foreman ranks #412 by the number of CVEs with a located fix.

Most patched functions

Functions in theforeman/foreman changed by the most CVE fixes.

Most patched files

Files in theforeman/foreman changed by the most CVE fixes.

1app/models/concerns/taxonomix.rb2 CVEs · 3 functions
2app/assets/javascripts/application.js2 CVEs · 1 functions
3config/application.rb2 CVEs · 1 functions
4app/assets/javascripts/charts.js1 CVEs · 6 functions
5app/assets/javascripts/host_edit_interfaces.js1 CVEs · 2 functions
6app/controllers/settings_controller.rb1 CVEs · 2 functions
7app/helpers/application_helper.rb1 CVEs · 2 functions
8app/models/notification.rb1 CVEs · 2 functions
9app/models/setting/email.rb1 CVEs · 2 functions
10app/services/foreman/renderer/scope/macros/transpilers.rb1 CVEs · 2 functions

Fix size

How much code a CVE fix in theforeman/foreman changes, with backports counted once.

17

Median lines changed

Added plus removed, per CVE

64%

Fixes of 20 lines or fewer

Share of CVE fixes

29%

Fixes in a single function

Share of CVE fixes

Latest CVEs

The most recently published CVEs with a fix located in theforeman/foreman, and the functions each fix changed.

Foreman Transpilation Enables OS Command Injection
CVE-2022-3874MoveCtCommandIntoOwnSetting transpile_coreos_linux_config transpile_fedora_coreos_config
Critical · CVSS 9.1
EPSS 2.2%2023-09-22
CVE-2021-3584
CVE-2021-3584validate_sendmail_location RestrictSendmailLocation self
High · CVSS 7.2
EPSS 3.9%2021-12-23
CVE-2016-8639
CVE-2016-8639edit_inline value edit_textfield
Medium · CVSS 6.1
EPSS 1.2%2018-08-01
CVE-2018-1097
CVE-2018-1097default_action
High · CVSS 8.8
EPSS 1.7%2018-04-04
CVE-2017-15100
CVE-2017-15100trunc_with_tooltip show expand_chart
Medium · CVSS 6.1
EPSS 1.1%2017-11-27
CVE-2014-3531
CVE-2014-3531os_name
Medium · CVSS 5.4
EPSS 1.2%2017-10-18
CVE-2015-5282
CVE-2015-5282turn_textarea_switch
Medium · CVSS 6.1
EPSS 1.0%2017-09-25
CVE-2017-7505
CVE-2017-7505set_notification_recipients authenticate subscriber_ids
High · CVSS 8.8
EPSS 1.6%2017-05-26
CVE-2016-6320
CVE-2016-6320update_interface_row show_interface_modal
Medium · CVSS 5.4
EPSS 0.9%2016-08-19
CVE-2016-6319
CVE-2016-6319add_label
Medium · CVSS 6.1
EPSS 2.0%2016-08-19
CVE-2015-3155
CVE-2015-3155Application hostChecked onContentLoad
Medium · CVSS 5.0
EPSS 2.2%2015-08-14
CVE-2015-1816
CVE-2015-1816OpenSSL
Medium · CVSS 5.0
EPSS 0.9%2015-08-14

Get an alert for each new theforeman/foreman CVE, with the patched functions and AI-written analysis.

Monitor foreman CVEs

Other repositories

Repositories with a similar number of located CVE fixes.

AcademySoftwareFoundation/OpenImageIO14 CVEs ail-project/ail-framework14 CVEs android.googlesource.com/platform-external-libhevc14 CVEs apostrophecms/apostrophe14 CVEs assimp/assimp14 CVEs authzed/spicedb14 CVEs bigtreecms/BigTree-CMS14 CVEs canonical/lxd14 CVEs

Browse all repositories

Frequently asked questions

Common questions about CVE fixes in theforeman/foreman.

How many CVEs have a located fix in theforeman/foreman?: 14 published CVEs have a fix traced to functions in theforeman/foreman, touching 41 functions across 30 files.
Which function in theforeman/foreman has been patched by the most CVEs?: taxable_ids in app/models/concerns/taxonomix.rb has been changed by 2 CVE fixes, from 2015 to 2017.
How large is a typical CVE fix in theforeman/foreman?: The median fix changes 17 lines. 64% of fixes change 20 lines or fewer, and 29% change a single function.
How is a fix located to a function?: The upstream fix commit for each CVE is fetched and its diff is split into hunks. Each hunk is attributed to the function, method or type it changes, using the definition the diff itself names. Backports of the same fix to stable branches are counted once.

References

Fix locations are computed by RadicalNotion.AI from the upstream patch diff of each CVE. CVE data is sourced from the CVE Program.

Track theforeman/foreman CVEs

Get an alert when a new CVE lands in this repository, with the patched functions and AI-written remediation guidance.

Create an account See pricing