Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/ee-dellemc-openmanage-rhel8
Red Hat
· Package
16 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
CVE-2026-22701 · GHSA-QMGC-5H2G-MVRW
Version ranges need review.
filelock
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
AIOHTTP Vulnerable to Cookie Parser Warning Storm
CVE-2025-69230 · GHSA-FH55-R93G-J68G
Version ranges need review.
aiohttp
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Low
Fix reported
2026-09-10
AIOHTTP vulnerable to DoS through chunked messages
CVE-2025-69229 · GHSA-G84X-MCQJ-X9QQ
Version ranges need review.
aiohttp
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
AIOHTTP has unicode match groups in regexes for ASCII protocol elements
CVE-2025-69225 · GHSA-MQQC-3GQH-H2X8
Version ranges need review.
aiohttp
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Low
Fix reported
2026-09-10
orjson does not limit recursion for deeply nested JSON documents
CVE-2025-67221 · GHSA-HX9Q-6W63-J58V
Version ranges need review.
orjson
OpenShift Lightspeed/openshift-lightspeed/lightspeed-service-api-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
AIOHTTP vulnerable to brute-force leak of internal static file path components
CVE-2025-69226 · GHSA-54JQ-C3M8-4M76
Version ranges need review.
aiohttp
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Low
Fix reported
2026-09-10
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
CVE-2025-68146 · GHSA-W853-JP5J-5J7F
Version ranges need review.
filelock
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
CVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2V
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
protobuf-python has a potential Denial of Service issue
CVE-2025-4565 · GHSA-8QVM-5X2C-J2W7
Version ranges need review.
protobuf
OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
urllib3 does not control redirects in browsers and Node.js
CVE-2025-50182 · GHSA-48P4-8XCF-VXJ5
Version ranges need review.
urllib3
Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
AIOHTTP's unicode processing of header values could cause parsing discrepancies
CVE-2025-69224 · GHSA-69F9-5GXW-WVC2
Version ranges need review.
aiohttp
Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8
PyPI
Red Hat
Low
Fix reported
2026-09-10
Django allows enumeration of user e-mail addresses
CVE-2024-45231 · GHSA-RRQC-C2JX-6JGV
Version ranges need review.
django
Red Hat Ansible Automation Platform 1.2/ansible-tower
PyPI
Red Hat
Medium
Fix reported
2026-07-07
setuptools vulnerable to Command Injection via package URL
CVE-2024-6345 · GHSA-CX63-2MW6-8HW5
Version ranges need review.
setuptools
Multiarch Tuning Operator/multiarch-tuning/multiarch-tuning-rhel9-operator
PyPI
Red Hat
High
Fix reported
2026-07-07
Langchain SQL Injection vulnerability
CVE-2024-8309 · GHSA-45PG-36P6-83V9
Version ranges need review.
langchain-community
langchain
PyPI
Red Hat
Low
Fix reported
2026-07-07
Django has a denial-of-service possibility in strip_tags()
CVE-2025-32873 · GHSA-8J24-CJRQ-GR2M
Version ranges need review.
django
Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/ee-dellemc-openmanage-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-06-10
xmltodict: xmltodict XML Injection
CVE-2025-9375
OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9
OpenShift Service Mesh 3/openshift-service-mesh/istio-cni-rhel9
Red Hat
Medium
No fix reported
Not recorded
