Red Hat OpenStack Platform 17.1/rhosp-rhel9/openstack-neutron-server

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsCVE-2026-86000 · GHSA-GJV8-XP57-G29CVersion ranges need review.	soupsieve Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)CVE-2026-85999 · GHSA-J934-XHV5-FG8FVersion ranges need review.	soupsieve Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-01
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review.	sqlparse Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8	PyPIRed Hat	High	Fix reported	2026-09-10
libsodium has Incomplete List of Disallowed InputsCVE-2025-69277 · GHSA-MRFV-M5WM-5W6WVersion ranges need review.	paragonie/sodium_compat hdwallet	ComposerPyPIRed Hat	Medium	Fix reported	2026-09-10
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5	Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundle Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator	Red HatRubyGems	Low	Fix reported	2026-09-10
ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository URL (e.g. --upload-pack) -> RCECVE-2026-84503	Migration Toolkit for Applications 8/mta/mta-rhel9-operator Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded