← Back
CLSA-2022-1654526367
Vulnerability in babel (CLSA-2022-1654526367)
Summary
vulnerability in babel (CLSA-2022-1654526367). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `2.5.1-10.module_el8.5.0+2050+77770ab7` or later.
AI summary snake-internal / snake-material-v2
A vulnerability tracked as **CLSA-2022-1654526367** has been found in babel.
Risk of unauthorized operations or information disclosure. CVSS score: ?/10.
What to do: upgrade babel to **2.5.1-10.module_el8.5.0+2050+77770ab7** or later.
If unsure, ask your IT team or search "babel CLSA-2022-1654526367" on the vendor's site.
CLSA-2022-1654526367 (babel) —
Patched: `2.5.1-10.module_el8.5.0+2050+77770ab7` — apply immediately
Plan: 1) Audit SBOM/dependencies, 2) Stage→prod upgrade, 3) Add WAF/proxy monitoring on affected endpoints, 4) Hunt IOCs in logs.
Refs: see the GHSA / vendor advisory / patched release linked on this page.
❓ What is the problem
**A vulnerability** (unclassified) exists in babel.
📍 Affected scope
babel — .
🔥 Severity
Severity: ?. Risk of unauthorized operations or information disclosure
🔧 How to fix
Update to **2.5.1-10.module_el8.5.0+2050+77770ab7**.
🛡️ Workaround
Until the patch is applied: disable the affected feature, apply WAF rules, or restrict access via network ACLs.
🔍 Detection
Search webserver/proxy logs for unusual request patterns matching this CVE's known IOCs. Run `grep -r 'babel' .` against your dependency files (package-lock.json, requirements.txt, go.sum) to find affected services.
Response Actions (7 steps)
Concrete steps and command examples for SOC/SRE teams to execute in order
-
1Identify exposure identify
grep -r 'babel' . | grep -v node_modulesリポジトリと本番環境の依存ファイル (package-lock.json / requirements.txt / go.sum / Gemfile.lock 等) で `babel` を grep し、稼働しているサービス・バージョンを把握する。
-
6Apply patch patch
Upgrade babel to 2.5.1-10.module_el8.5.0+2050+77770ab7ステージング環境で 2.5.1-10.module_el8.5.0+2050+77770ab7 に上げて回帰テスト → 本番反映。回帰テストはアプリの主要ハッピーパスと、Step 3 で見つけた異常検知の続報チェックを含めること。
-
7Post-deployment verification verify
Confirm patched version is live in productionパッチ適用後、ステージングで PoC または同等の悪用パターンを再現して脆弱性が閉じたことを確認。本番では Step 3 と同じログクエリでアラート再発が無いか継続監視。
Affected packages
TuxCare:CentOS:8.5
babel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-10.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python-nose-docs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python-psycopg2-doc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python-sqlalchemy-doc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-Cython
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.28.1-7.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-PyMySQL
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.0-10.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-attrs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"17.4.0-10.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-babel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.1-10.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-backports
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0-16.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-backports-ssl_match_hostname
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5.0.1-12.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-bson
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-chardet
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.0.4-10.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-coverage
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.5.1-4.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-debug
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-devel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-dns
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.0-10.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-docs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-docs-info
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.16-2.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-docutils
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.14-12.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-funcsigs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.2-13.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-idna
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5-7.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-ipaddress
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.18-6.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-jinja2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.10-9.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-libs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-lxml
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.2.3-5.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-markupsafe
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.23-19.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-mock
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.0.0-13.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-nose
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.7-31.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-numpy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-numpy-doc
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-numpy-f2py
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:1.14.2-16.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pip
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-18.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pip-wheel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.0.3-18.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pluggy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.0-8.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-psycopg2
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-psycopg2-debug
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-psycopg2-tests
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.5-7.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-py
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.5.3-6.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pygments
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.0-22.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pymongo
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pymongo-gridfs
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.7.0-1.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pysocks
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.6.8-6.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pytest
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4.2-13.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pytest-mock
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.0-4.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pytz
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2017.2-12.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-pyyaml
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.12-16.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-requests
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.20.0-3.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-rpm-macros
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3-38.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-scipy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-21.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-setuptools
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-setuptools-wheel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"39.0.1-13.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-setuptools_scm
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.15.7-6.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-six
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0-6.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-sqlalchemy
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.2-2.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-test
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-tkinter
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-tools
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.7.18-7.module_el8.5.0+2050+77770ab7.tuxcare.els1"}]}]
TuxCare:CentOS:8.5
python2-urllib3
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.2-3.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-virtualenv
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"15.1.0-21.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-wheel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module_el8.5.0+2050+77770ab7"}]}]
TuxCare:CentOS:8.5
python2-wheel-wheel
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:0.31.1-3.module_el8.5.0+2050+77770ab7"}]}]