Security
فارسی
All products

Red Hat Ansible Automation Platform 2/ansible-on-clouds/aoc-azure-aap-installer-rhel9

Red Hat · Package
31 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Lodash has Prototype Pollution Vulnerability in `_.unset`, `_.omit`, and `_.pullAt` functionsCVE-2025-13465 · GHSA-XXJR-MMJV-4GPG lodash-amdlodash-es npmRed Hat Medium Fix reported
lodash vulnerable to prototype pollution via array-path bypass in `_.unset`, `_.omit`, and `_.pullAtCVE-2026-2950 · GHSA-F23M-R3PF-42RH lodash-amdlodash-es npmRed Hat Medium Fix reported
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
Enforce maximum recursion depth in encoding/asn1CVE-2026-33818 · GO-2026-5972 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
lodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800 · GHSA-R5FR-RJXR-66JC lodash-amdlodash-es npmRed Hat High Fix reported
HTTP/2 transport accepts malformed framing-related headers in net/httpCVE-2026-78660 · GO-2026-6610 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 GoRed Hat High Fix reported
React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6 react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router: Unauthenticated Denial of Service via Inefficient Route MatchingCVE-2026-55685 · GHSA-CHX6-HX7R-MCP5 react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 npmRed Hat High Fix reported
React Router: Potential CSRF via PUT/PATCH/DELETE document requestsCVE-2026-53663 · GHSA-84G9-W2XQ-VCV6 @remix-run/server-runtimereact-router npmRed Hat Low Fix reported
@tootallnate/once vulnerable to Incorrect Control Flow ScopingCVE-2026-3449 · GHSA-VPQ2-C234-7XJ6 @tootallnate/onceConfidential Compute Attestation/openshift-sandboxed-containers/osc-pccs npmRed Hat Low Fix reported
Underscore has unlimited recursion in _.flatten and _.isEqual, potential for DoS attackCVE-2026-27601 · GHSA-QPX9-HPMF-5GMW underscoreLogging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle npmRed Hat High Fix reported
brace-expansion: Zero-step sequence causes process hang and memory exhaustionCVE-2026-33750 · GHSA-F886-M6HF-6M8V brace-expansionCryostat 4/brace-expansion npmRed Hat Medium Fix reported
React Router's same-origin redirect with path starting // causes open redirect via protocol-relative URL reinterpretationCVE-2026-40181 · GHSA-2J2X-HQR9-3H42 @remix-run/routerreact-router npmRed Hat Medium Fix reported
React Router: RSCErrorHandler Missing Protocol Validation (XSS)CVE-2026-53667 · GHSA-H8FP-F39C-Q6MH react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 npmRed Hat Medium Fix reported
React Router: Arbitrary Constructor Injection via deserializeErrors() in React Router SSR HydrationCVE-2026-53666 · GHSA-337J-9HXR-RHXG react-routerCryostat 4/cryostat-openshift-console-plugin-npm npmRed Hat Medium Fix reported
React Router vulnerable to DoS via unbounded path expansion in __manifest endpointCVE-2026-42342 · GHSA-8X6R-G9MW-2R78 @remix-run/server-runtimereact-router npmRed Hat High Fix reported
React Router's vendored turbo-stream v2 allows arbitrary constructor invocation via TYPE_ERROR deserialization leading to Unauth RCECVE-2026-42211 · GHSA-49RJ-9FVP-4H2H react-routerOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-rhel9 npmRed Hat High Fix reported
Go JOSE Panics in JWE decryptionCVE-2026-34986 · GHSA-78H2-9FRX-2JM8Version ranges need review. github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
SVGO DoS through entity expansion in DOCTYPE (Billion Laughs)CVE-2026-29074 · GHSA-XPQW-6GX7-V673 svgoCryostat 4/io.cryostat-cryostat npmRed Hat High Fix reported