Red Hat OpenStack Platform 16.2/rhosp-rhel8/openstack-novajoin-server

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M	dnspython Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-11-12
WebOb: Open redirect in Location header normalization via leading C0 control / space charactersCVE-2026-54770 · GHSA-6HX8-3WJJ-GR8GVersion ranges need review.	webob Red Hat Ceph Storage 4/python-webob	PyPIRed Hat	Medium	Fix reported	2026-09-10
ironic: OpenStack Ironic: Information disclosure via crafted requestCVE-2026-71201	Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded
jwcrypto: jwcrypto: Denial of Service via malformed JWE tokensCVE-2026-80179	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8	Red Hat	Medium	No fix reported	Not recorded
jwcrypto: jwcrypto: denial of service via O(n^2) duplicate check on unbounded JWK key_ops arrayCVE-2026-92091	Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8	Red Hat	Medium	No fix reported	Not recorded
openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmissionCVE-2026-84782	Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Confidential Compute Attestation/agent-sandbox/agent-sandbox-router	Red Hat	High	No fix reported	Not recorded