Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/gateway-rhel9-operator

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientCVE-2026-118669 · GHSA-7984-QGVG-3J9C	oauthlib Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9	PyPIRed Hat	High	Fix reported	2026-10-31
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decodingCVE-2026-119195 · GHSA-9M75-VC3G-4X39	pyasn1 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-31
pyasn1 has quadratic-complexity denial of service in binary REAL decodingCVE-2026-119197 · GHSA-MM57-4V3P-RCHX	pyasn1 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-31
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decodingCVE-2026-119194 · GHSA-FM9C-5RCF-2Q5P	pyasn1 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-31
pyasn1 has quadratic CPU consumption in constructed BIT STRING decodingCVE-2026-119196 · GHSA-2QM8-X737-GMW5	pyasn1 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-31
aap-gateway-operator: resource-server secret exposed in plaintext in the AutomationController custom resourceCVE-2026-126643	Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/gateway-rhel8-operator Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/gateway-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded