rubygem-excon (SUSE:Linux Enterprise Module for Containers 12) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Containers 12 package rubygem-excon, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2016-8867 — CVSS 7.5 (high): Docker Engine 1.12.2 enabled ambient capabilities with misconfigured capability policies. This allowed malicious images to bypass user…
• CVE-2019-16779 — CVSS 5.8 (medium): In RubyGem excon before 0.71.0, there was a race condition around persistent connections, where a connection which is interrupted (such as…