Red Hat Ceph Storage 4/rhceph/rhceph-4-rhel8
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation | oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| PyJWT: PyJWKClient follows redirects when fetching JWKS | pyjwtAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 | PyPIRed Hat | High | Fix reported | |
| PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse | pyjwtAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 | PyPIRed Hat | Medium | No fix reported | |
| ceph: rhceph-container: Authentication bypass in CEPH RadosGW | Red Hat Ceph Storage 4/cephRed Hat Ceph Storage 4/rhceph/rhceph-4-rhel8 | Red Hat | High | No fix reported |