All products

Red Hat Ansible Automation Platform 2/redhat-user-workloads/gateway-rhel9

Red Hat · Package
9 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892 · GHSA-P423-J2CM-9VMQVersion ranges need review. cryptographyLightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 PyPIRed Hat Medium Fix reported
Axios HTTP/2 Session Cleanup State Corruption VulnerabilityCVE-2026-39865 · GHSA-QJ83-CQ47-W5F8 axiosCryostat 4/axios npmRed Hat Medium Fix reported
Axios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFCVE-2025-62718 · GHSA-3P68-RC4W-QGX5 axiosGatekeeper 3/redhat-user-workloads/gatekeeper-3-18 npmRed Hat Medium Fix reported
Vite Vulnerable to Path Traversal in Optimized Deps `.map` HandlingCVE-2026-39365 · GHSA-4W7W-66W2-5VF9 viteRed Hat Advanced Cluster Security 4/rhacs-eng/release-main npmRed Hat Medium Fix reported
Django vulnerable to privilege abuse in GenericInlineModelAdminCVE-2026-4277 · GHSA-PWJP-CCJC-GHWGVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8-operator PyPIRed Hat Low Fix reported
Django vulnerable to privilege abuse in ModelAdmin.list_editableCVE-2026-4292 · GHSA-MMWR-2JHP-MC7JVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8-operator PyPIRed Hat Low Fix reported
Django has potential DoS via MultiPartParser through crafted multipart uploadsCVE-2026-33033 · GHSA-5MF9-H53Q-7MHQVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8-operator PyPIRed Hat Medium Fix reported
Django: SGI requests with a missing or understated `Content-Length` header could bypass the `DATA_UPLOAD_MAX_MEMORY_SIZE` limitCVE-2026-33034 · GHSA-933H-HP56-HF7MVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8-operator PyPIRed Hat High Fix reported
Django vulnerable to ASGI header spoofing via underscore/hyphen conflationCVE-2026-3902 · GHSA-MVFQ-GGXM-9MC5Version ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8-operator PyPIRed Hat High Fix reported