Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenStack Platform 17.1/rhosp-rhel9/openstack-cinder-api
Red Hat
· Package
7 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
CVE-2026-49264 · GHSA-HJ66-6F7G-4R5V
Version ranges need review.
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-13
Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)
CVE-2026-49265 · GHSA-XPV3-W29H-X7CV
Version ranges need review.
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-13
PyJWT: PyJWKClient follows redirects when fetching JWKS
CVE-2026-102267 · GHSA-9V7F-9G4P-FFGJ
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
CVE-2026-103001 · GHSA-GVP8-978C-RX2Q
Version ranges need review.
pyjwt
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
Medium
No fix reported
2026-10-01
sqlparse: Quadratic O(n²) DoS in group_comments
CVE-2026-71491 · GHSA-F2FF-P2WW-7P4P
Version ranges need review.
sqlparse
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-09-10
libsodium has Incomplete List of Disallowed Inputs
CVE-2025-69277 · GHSA-MRFV-M5WM-5W6W
Version ranges need review.
paragonie/sodium_compat
hdwallet
Composer
PyPI
Red Hat
Medium
Fix reported
2026-09-10
REXML has DoS condition when parsing malformed XML file
CVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle
Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator
Red Hat
RubyGems
Low
Fix reported
2026-09-10
