| zip: Critical Parser Differential & Security Control Bypass via Dual-Header Inconsistencies (Zip Cloaking) Leading to Arbitrary File Overwrite & RCECVE-2026-115905 · GHSA-M665-V7PM-7GRJ |
zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Critical
|
Fix reported |
|
| zip: Unbounded Symlink-Target Handling Can Abort Or Exhaust Memory During ExtractionCVE-2026-115909 · GHSA-Q7V9-X93C-XQV3Version ranges need review. |
zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
High
|
Fix reported |
|
| zip: legacy Shrink/Reduce/Implode decoder: denial of service from attacker-controlled ZIP64 uncompressed sizeCVE-2026-115907 · GHSA-9HJ8-73FH-9963 |
zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
High
|
Fix reported |
|
| zip: Arbitrary file write outside the extraction directory, because ZipArchive::extract validates symlink targets lexically. CVE-2026-115908 · GHSA-HJQX-J4RW-G7XV |
zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
High
|
Fix reported |
|
| zip: AES Entry HMAC Authentication Bypass on Premature EOFCVE-2026-115906 · GHSA-8HXF-QR8P-62X4 |
zipAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| Tokio: Race condition in `tokio::time::Interval`CVE-2026-115567 · GHSA-5WJR-9356-4WC8Version ranges need review. |
tokioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| webpki: Name constraints were accepted for certificates asserting a wildcard nameCVE-2026-93601 · GHSA-XGP8-3HG3-C2MHVersion ranges need review. |
rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Low
|
Fix reported |
|
| webpki: Name constraints for URI names were incorrectly acceptedCVE-2026-93600 · GHSA-965H-392X-2MH5Version ranges need review. |
rustls-webpkiConfidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9 |
Rust / CargoRed Hat |
Low
|
Fix reported |
|
| webpki: CRLs not considered authoritative by Distribution Point due to faulty matching logicCVE-2026-93602 · GHSA-PWJX-QHCG-RVJ4Version ranges need review. |
rustls-webpkiAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
Rust / CargoRed Hat |
Medium
|
Fix reported |
|
| qs: Denial of Service via Attacker Controlled isBufferCVE-2026-82417 · GHSA-4MJR-XMP4-GH2G |
qsAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| org.mariadb.jdbc:mariadb-java-client has Inappropriate Encoding for Output ContextCVE-2026-55858 · GHSA-XVR9-35CR-46V9 |
org.mariadb.jdbc:mariadb-java-clientOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Axios: Prototype pollution auth subfields can inject Basic authCVE-2026-67314 · GHSA-XJ6Q-8X83-JV6G |
axiosMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| React Router: Open redirect via backslash in <Link> and useNavigate (CVE-2025-68470 bypass)CVE-2026-53669 · GHSA-WRJC-X8RR-H8H6 |
react-routerCryostat 4/cryostat-openshift-console-plugin-npm |
npmRed Hat |
Medium
|
Fix reported |
|
| Axios: Deep formToJSON Key Recursion Can Cause Denial of ServiceCVE-2026-67312 · GHSA-PMV8-RQ9R-6J72 |
axiosOpenShift Pipelines/openshift-pipelines/pipelines-hub-ui-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| React Router: Unauthenticated Denial of Service via Inefficient Route MatchingCVE-2026-55685 · GHSA-CHX6-HX7R-MCP5 |
react-routerExploit Intelligence/exploit-intelligence-tech-preview/agent-client-rhel9 |
npmRed Hat |
High
|
Fix reported |
|
| Axios: Nested axios option objects can consume polluted prototype valuesCVE-2026-67319 · GHSA-7Q8Q-RJ6J-MHJQ |
axiosGatekeeper 3/gatekeeper/gatekeeper-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| qs array-limit bypass via bracket-key comma parsingCVE-2026-82562 · GHSA-X5FP-WJ9C-MXMX |
qsAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-ui-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
| MariaDB has cleartext password disclosure to a MITM on the initial-handshakeCVE-2026-55856 · GHSA-G9JJ-CGMH-9F38 |
org.mariadb.jdbc:mariadb-java-clientOpenShift Pipelines/openshift-pipelines/pipelines-console-plugin-pf5-rhel9 |
MavenRed Hat |
Medium
|
Fix reported |
|
| Axios Node HTTP adapter can use an inherited proxy after interceptor config cloningCVE-2026-67320 · GHSA-GCFJ-64VW-6MP9 |
axiosMulticluster Engine for Kubernetes/multicluster-engine/console-mce-rhel9 |
npmRed Hat |
High
|
Fix reported |
|
| Axios: Fetch adapter `ReadableStream` uploads bypass `maxBodyLength`CVE-2026-67317 · GHSA-JQH4-M9W3-8HP9 |
axiosMigration Toolkit for Applications 8/mta/mta-ui-rhel9 |
npmRed Hat |
Medium
|
Fix reported |
|
