Foreman: ssti and insecure deserialization in foreman-rake configuration

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6.16 for RHEL 8",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "foreman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.12.0.23-1.el8sat",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:satellite:6.16::el8",
                        "cpe:/a:redhat:satellite:6.16::el9",
                        "cpe:/a:redhat:satellite_capsule:6.16::el8",
                        "cpe:/a:redhat:satellite_capsule:6.16::el9",
                        "cpe:/a:redhat:satellite_utils:6.16::el8",
                        "cpe:/a:redhat:satellite_utils:6.16::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6.16 for RHEL 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "foreman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.12.0.23-1.el9sat",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:satellite:6.16::el8",
                        "cpe:/a:redhat:satellite:6.16::el9",
                        "cpe:/a:redhat:satellite_capsule:6.16::el8",
                        "cpe:/a:redhat:satellite_capsule:6.16::el9",
                        "cpe:/a:redhat:satellite_utils:6.16::el8",
                        "cpe:/a:redhat:satellite_utils:6.16::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6.17 for RHEL 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "foreman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.14.0.22-1.el9sat",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:satellite:6.17::el9",
                        "cpe:/a:redhat:satellite_capsule:6.17::el9",
                        "cpe:/a:redhat:satellite_utils:6.17::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6.18 for RHEL 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "foreman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.16.0.25-1.el9sat",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:satellite:6.18::el9",
                        "cpe:/a:redhat:satellite_capsule:6.18::el9",
                        "cpe:/a:redhat:satellite_utils:6.18::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6.19 for RHEL 9",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "foreman",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "0:3.18.0.14-1.el9sat",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:satellite:6.19::el9",
                        "cpe:/a:redhat:satellite_capsule:6.19::el9",
                        "cpe:/a:redhat:satellite_utils:6.19::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat Satellite 6",
                    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                    "packageName": "satellite:el8/foreman",
                    "defaultStatus": "affected",
                    "cpes": [
                        "cpe:/a:redhat:satellite:6"
                    ]
                }