Red Hat OpenShift Container Platform 4/openshift4/ose-ironic-agent-rhel9

Red Hat · Package

9 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M	dnspython Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-11-12
urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memoryCVE-2026-97689 · GHSA-VXQ7-64XX-V4GWVersion ranges need review.	urllib3 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-01
urllib3: HTTPS proxy TLS configuration may be ignored or overriddenCVE-2026-97687 · GHSA-8988-9CW3-XX77Version ranges need review.	urllib3 Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-10-01
WebOb: Open redirect in Location header normalization via leading C0 control / space charactersCVE-2026-54770 · GHSA-6HX8-3WJJ-GR8GVersion ranges need review.	webob Red Hat Ceph Storage 4/python-webob	PyPIRed Hat	Medium	Fix reported	2026-09-10
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
pip's fallback tar extraction doesn't check symbolic links point to extraction directoryCVE-2025-8869 · GHSA-4XH5-X5GV-QWPHVersion ranges need review.	pip Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-api-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
ply: python-ply: Unsafe pickle file handling in PlyCVE-2025-56005	Migration Toolkit for Containers/rhmtc/openshift-migration-rhel8-operator Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-must-gather-rhel8	Red Hat	High	No fix reported	Not recorded
ironic-python-agent: ironic-python-agent: Credential extraction from bootc container deployment via /proc/1/rootCVE-2026-54422	Red Hat OpenShift Container Platform 4/openshift4/ose-ironic-agent-rhel9 Red Hat OpenShift Container Platform 4/openstack-ironic-python-agent	Red Hat	High	No fix reported	Not recorded
ironic: OpenStack Ironic: Information disclosure via crafted requestCVE-2026-71201	Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded