Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift Container Platform 5/openshift5/ose-ironic-rhel9
Red Hat
· Package
12 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
dnspython dns.name.from_wire_parser() excessive CPU use
CVE-2026-114605 · GHSA-45C3-73F7-PV4M
dnspython
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-11-12
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
CVE-2026-86000 · GHSA-GJV8-XP57-G29C
Version ranges need review.
soupsieve
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
CVE-2026-85999 · GHSA-J934-XHV5-FG8F
Version ranges need review.
soupsieve
Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-01
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
CVE-2026-97689 · GHSA-VXQ7-64XX-V4GW
Version ranges need review.
urllib3
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
CVE-2026-97687 · GHSA-8988-9CW3-XX77
Version ranges need review.
urllib3
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
WebOb: Open redirect in Location header normalization via leading C0 control / space characters
CVE-2026-54770 · GHSA-6HX8-3WJJ-GR8G
Version ranges need review.
webob
Red Hat Ceph Storage 4/python-webob
PyPI
Red Hat
Medium
Fix reported
2026-09-10
sqlparse: Quadratic O(n²) DoS in group_comments
CVE-2026-71491 · GHSA-F2FF-P2WW-7P4P
Version ranges need review.
sqlparse
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-09-10
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
CVE-2026-59894 · GHSA-3496-9G83-7V6X
Version ranges need review.
sqlparse
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
CVE-2026-59893 · GHSA-PRG7-HCFM-MFCR
Version ranges need review.
sqlparse
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-09-10
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
CVE-2026-54284 · GHSA-PWGV-4X5Q-6M9F
Version ranges need review.
sqlparse
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8
PyPI
Red Hat
High
Fix reported
2026-09-10
keystonemiddleware: keystonemiddleware: application credential access_rules bypass via X-Service-Token header presence check
CVE-2026-115642
Red Hat OpenShift Container Platform 4/openshift4/ose-ironic-rhel9
Red Hat OpenShift Container Platform 4/python-keystonemiddleware
Red Hat
High
No fix reported
Not recorded
scp: scp.py: Arbitrary file overwrite via path traversal
CVE-2026-109152
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
Red Hat
Medium
No fix reported
Not recorded
