Red Hat Ansible Automation Platform 2/python3.12-django

Red Hat · Package

5 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
django: Potential exposure of private data via empty and missing `Vary` headersCVE-2026-113593	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8	Red Hat	Low	No fix reported	Not recorded
django: Privilege abuse in model formsets with editable primary keysCVE-2026-87975	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8	Red Hat	Medium	No fix reported	Not recorded
django: Server-side request forgery via unvalidated bytes in spatial lookupsCVE-2026-87890	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8	Red Hat	Medium	No fix reported	Not recorded
django: Denial of service via quadratic parsing complexity in parse_header_parameters()CVE-2026-84429	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8	Red Hat	Medium	No fix reported	Not recorded
django: Denial of service via unbounded caching of long language codes in get_supported_language_variant()CVE-2026-77050	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8	Red Hat	Medium	No fix reported	Not recorded