Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Ansible Automation Platform 2/ansible-automation-platform-27/platform-resource-rhel9-operator
Red Hat
· Package
17 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client
CVE-2026-118669 · GHSA-7984-QGVG-3J9C
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-31
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding
CVE-2026-119195 · GHSA-9M75-VC3G-4X39
pyasn1
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-31
pyasn1 has quadratic-complexity denial of service in binary REAL decoding
CVE-2026-119197 · GHSA-MM57-4V3P-RCHX
pyasn1
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-31
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding
CVE-2026-119194 · GHSA-FM9C-5RCF-2Q5P
pyasn1
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-31
pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding
CVE-2026-119196 · GHSA-2QM8-X737-GMW5
pyasn1
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-31
Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
CVE-2026-49264 · GHSA-HJ66-6F7G-4R5V
Version ranges need review.
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-13
Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)
CVE-2026-49265 · GHSA-XPV3-W29H-X7CV
Version ranges need review.
oauthlib
Confidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-10-13
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
CVE-2026-97689 · GHSA-VXQ7-64XX-V4GW
Version ranges need review.
urllib3
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
urllib3: HTTPS proxy TLS configuration may be ignored or overridden
CVE-2026-97687 · GHSA-8988-9CW3-XX77
Version ranges need review.
urllib3
Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9
PyPI
Red Hat
High
Fix reported
2026-10-01
pyasn1: Quadratic complexity in OBJECT IDENTIFIER and RELATIVE-OID processing allows denial of service
CVE-2026-59885 · GHSA-8PPF-4F7H-5PPJ
Version ranges need review.
pyasn1
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDs
CVE-2026-59884 · GHSA-M4P7-R5RC-7G4J
Version ranges need review.
pyasn1
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix
CVE-2026-45409 · GHSA-65PC-FJ4G-8RJX
Version ranges need review.
idna
Confidential Cluster Operator/confidential-clusters-beta/attestation-key-register-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
pyasn1: Uncontrolled resource consumption when converting decoded REAL values
CVE-2026-59886 · GHSA-HM4W-WWCW-MR6R
Version ranges need review.
pyasn1
Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9
PyPI
Red Hat
High
Fix reported
2026-09-10
ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository URL (e.g. --upload-pack) -> RCE
CVE-2026-84503
Migration Toolkit for Applications 8/mta/mta-rhel9-operator
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator
Red Hat
Medium
No fix reported
Not recorded
ansible-core: user module generate_ssh_key follows a symlinked ~/.ssh enabling local privilege escalation (incomplete fix of CVE-2024-9902)
CVE-2026-123037
Migration Toolkit for Applications 8/mta/mta-rhel9-operator
Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator
Red Hat
Medium
No fix reported
Not recorded
ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution
CVE-2026-89091
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-operator-bundle
Red Hat Advanced Cluster Management for Kubernetes 2/rhacm2/volsync-rhel9
Red Hat
High
No fix reported
Not recorded
ansible-operator-plugins: Ansible Operator Plugins: Arbitrary Code Execution via Jinja2 Template Injection
CVE-2026-92982
Migration Toolkit for Applications 8/mta/mta-rhel9-operator
Migration Toolkit for Containers/rhmtc/openshift-migration-rhel8-operator
Red Hat
High
No fix reported
Not recorded
