Red Hat Update Infrastructure 5/rhui5/installer-rhel9

Red Hat · Package

2 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository URL (e.g. --upload-pack) -> RCECVE-2026-84503	Migration Toolkit for Applications 8/mta/mta-rhel9-operator Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded
ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code executionCVE-2026-89091	Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-rhel9	Red Hat	High	No fix reported	Not recorded