Service Telemetry Framework 1.5/stf/prometheus-webhook-snmp-rhel9

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOMECVE-2026-114608 · GHSA-22QQ-2FWX-7P67	pylint Red Hat OpenShift AI (RHOAI)/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-27
pyasn1 BER/CER/DER decoder denial of service via unbounded long-form tag IDsCVE-2026-59884 · GHSA-M4P7-R5RC-7G4JVersion ranges need review.	pyasn1 Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
pip Vulnerable to Inclusion of Functionality from Untrusted Control SphereCVE-2026-6357 · GHSA-JP4C-XJXW-MGF9Version ranges need review.	pip Exploit Intelligence/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP filesCVE-2026-3219 · GHSA-58QW-9MGM-455VVersion ranges need review.	pip Lightspeed Core/lightspeed-core/lightspeed-stack-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
pip Path Traversal vulnerabilityCVE-2026-1703 · GHSA-6VGW-5PG2-W6JPVersion ranges need review.	pip Lightspeed Core/lightspeed-core/dataverse-exporter-rhel9	PyPIRed Hat	Low	Fix reported	2026-09-10
pytest has vulnerable tmpdir handlingCVE-2025-71176 · GHSA-6W46-J5RX-G56GVersion ranges need review.	pytest OpenShift Service Mesh 2/openshift-service-mesh/grafana-rhel8	PyPIRed Hat	Medium	Fix reported	2026-09-10
pip's fallback tar extraction doesn't check symbolic links point to extraction directoryCVE-2025-8869 · GHSA-4XH5-X5GV-QWPHVersion ranges need review.	pip Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-api-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10