Security
فارسی
All products

Red Hat OpenStack Platform 17.1/rhosp-rhel9/openstack-tripleoclient

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M dnspythonAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat High Fix reported
GitPython: git-config section-name injection enables arbitrary config directives (core.sshCommand RCE)CVE-2026-69097 · GHSA-3RP5-JJMW-4WV2Version ranges need review. gitpythonRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patternsCVE-2026-86000 · GHSA-GJV8-XP57-G29CVersion ranges need review. soupsieveExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)CVE-2026-85999 · GHSA-J934-XHV5-FG8FVersion ranges need review. soupsieveExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat Medium Fix reported
GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsingCVE-2026-87819 · GHSA-G5VV-9GXW-82HXVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
libsodium has Incomplete List of Disallowed InputsCVE-2025-69277 · GHSA-MRFV-M5WM-5W6WVersion ranges need review. paragonie/sodium_compathdwallet ComposerPyPIRed Hat Medium Fix reported
REXML has DoS condition when parsing malformed XML fileCVE-2025-58767 · GHSA-C2F4-JGMC-Q2R5 Logging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-operator-bundleLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel9-operator Red HatRubyGems Low Fix reported
GitPython: clone_from()/clone() omit --separate-git-dir from unsafe_git_clone_options, enabling arbitrary git-directory creation outside the destinationCVE-2026-78677 · GHSA-8MCC-HRX5-HVXCVersion ranges need review. gitpythonExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 PyPIRed Hat High Fix reported
OpenStack's Mistral Client has a local file inclusion vulnerabilityCVE-2021-4472 · GHSA-75HX-6R6J-HW56Version ranges need review. python-mistralclientRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-aodh-api PyPIRed Hat Medium Fix reported
ansible-core: ansible-core: ansible.builtin.git invokes git without a `--` separator, allowing argument injection via a `-`-leading repository URL (e.g. --upload-pack) -> RCECVE-2026-84503 Migration Toolkit for Applications 8/mta/mta-rhel9-operatorMigration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-rhel9-operator Red Hat Medium No fix reported
jwcrypto: jwcrypto: denial of service via O(n^2) duplicate check on unbounded JWK key_ops arrayCVE-2026-92091 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/lightspeed-rhel8 Red Hat Medium No fix reported
GitPython: GitPython: Directory traversal via untrusted submodule pathCVE-2026-100689 Exploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9Migration Toolkit for Applications 8/mta/mta-solution-server-rhel9 Red Hat Medium No fix reported