Red Hat OpenStack Platform 17.1/rhosp-rhel9/openstack-ironic-base

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsCVE-2026-86000 · GHSA-GJV8-XP57-G29CVersion ranges need review.	soupsieve Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)CVE-2026-85999 · GHSA-J934-XHV5-FG8FVersion ranges need review.	soupsieve Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review.	sqlparse Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8	PyPIRed Hat	High	Fix reported	2026-09-10
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator	Red HatRubyGems	Low	Fix reported	2026-09-10
ironic: OpenStack Ironic: Information disclosure via crafted requestCVE-2026-71201	Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded
ironic: OpenStack Ironic: Information disclosure via unexpected credential transmissionCVE-2026-90461	Red Hat OpenShift Container Platform 4/openshift4/ose-ironic-rhel9 Red Hat OpenShift Container Platform 4/openstack-ironic	Red Hat	Medium	No fix reported	Not recorded