Red Hat OpenStack Platform 16.2/rhosp-rhel8/openstack-zaqar-wsgi

Red Hat · Package

14 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M	dnspython Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9	PyPIRed Hat	High	Fix reported	2026-11-12
MongoDB Python Driver: Out-of-bounds read in BSON decoding via a malformed Regex elementCVE-2026-106435 · GHSA-98QM-WVGF-W4CF	pymongo Red Hat OpenShift AI (RHOAI)/rhoai/odh-llama-stack-core-rhel9	PyPIRed Hat	High	Fix reported	2026-10-27
PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryptionCVE-2026-96747 · GHSA-QX36-8MW2-4R3XVersion ranges need review.	pymongo Red Hat OpenShift AI (RHOAI)/rhoai/odh-llama-stack-core-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-15
PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimitersCVE-2026-96748 · GHSA-VP6J-J7W5-5XJJVersion ranges need review.	pymongo Red Hat OpenShift AI (RHOAI)/rhoai/odh-llama-stack-core-rhel9	PyPIRed Hat	High	Fix reported	2026-10-15
pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methodsCVE-2026-88029 · GHSA-8FVV-FGR5-F8CHVersion ranges need review.	pymongo Red Hat OpenShift AI (RHOAI)/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9	PyPIRed Hat	Medium	Fix reported	2026-10-15
WebOb: Open redirect in Location header normalization via leading C0 control / space charactersCVE-2026-54770 · GHSA-6HX8-3WJJ-GR8GVersion ranges need review.	webob Red Hat Ceph Storage 4/python-webob	PyPIRed Hat	Medium	Fix reported	2026-09-10
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review.	sqlparse Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8	PyPIRed Hat	High	Fix reported	2026-09-10
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashesCVE-2026-59894 · GHSA-3496-9G83-7V6XVersion ranges need review.	sqlparse Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8	PyPIRed Hat	Medium	Fix reported	2026-09-10
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)CVE-2026-59893 · GHSA-PRG7-HCFM-MFCRVersion ranges need review.	sqlparse Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8	PyPIRed Hat	High	Fix reported	2026-09-10
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerCVE-2026-54284 · GHSA-PWGV-4X5Q-6M9FVersion ranges need review.	sqlparse Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8	PyPIRed Hat	High	Fix reported	2026-09-10
ironic: OpenStack Ironic: Information disclosure via crafted requestCVE-2026-71201	Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel8-operator Red Hat OpenShift Container Platform 4/openshift4/ose-baremetal-rhel9-operator	Red Hat	Medium	No fix reported	Not recorded
ASR Crane: Falcon: as_rrc: 3g.mod: ASR Crane, Falcon: NULL pointer dereference allows pointer manipulationCVE-2026-42801	Red Hat OpenStack Platform 16.2/rhosp-rhel8/openstack-zaqar-wsgi	Red Hat	High	No fix reported	Not recorded
zaqar: OpenStack Zaqar: authentication bypass via empty URL-Signature headerCVE-2026-97404	Red Hat OpenStack Platform 13 (Queens)/openstack-zaqar Red Hat OpenStack Platform 16.2/openstack-zaqar	Red Hat	Medium	No fix reported	Not recorded
openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmissionCVE-2026-84782	Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 Confidential Compute Attestation/agent-sandbox/agent-sandbox-router	Red Hat	High	No fix reported	Not recorded