Security
فارسی
All products

Red Hat OpenStack Platform 18.0/rhoso/openstack-horizon-rhel9

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M dnspythonAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat High Fix reported
Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsingCVE-2026-15307 · GHSA-WVQV-FJ8W-QMHMVersion ranges need review. djangoRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/ansible-dev-tools-rhel8 PyPIRed Hat High Fix reported
WebOb: Open redirect in Location header normalization via leading C0 control / space charactersCVE-2026-54770 · GHSA-6HX8-3WJJ-GR8GVersion ranges need review. webobRed Hat Ceph Storage 4/python-webob PyPIRed Hat Medium Fix reported
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashesCVE-2026-59894 · GHSA-3496-9G83-7V6XVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)CVE-2026-59893 · GHSA-PRG7-HCFM-MFCRVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerCVE-2026-54284 · GHSA-PWGV-4X5Q-6M9FVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
OpenStack Horizon RC file generation does not escape special characters in project namesCVE-2026-55748 · GHSA-6WRM-X65G-HR4PVersion ranges need review. horizonRed Hat OpenStack Platform 13 (Queens)/rhosp13/openstack-horizon PyPIRed Hat Medium No fix reported
Django is vulnerable to SQL injection in column aliasesCVE-2025-13372 · GHSA-RQW2-GHQ9-44M7Version ranges need review. djangoOpenShift Service Mesh 2/openshift-service-mesh/pilot-rhel8 PyPIRed Hat Medium Fix reported
django: Privilege abuse in model formsets with editable primary keysCVE-2026-87975 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Server-side request forgery via unvalidated bytes in spatial lookupsCVE-2026-87890 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Denial of service via quadratic parsing complexity in parse_header_parameters()CVE-2026-84429 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported
django: Denial of service via unbounded caching of long language codes in get_supported_language_variant()CVE-2026-77050 Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8Red Hat Ansible Automation Platform 2/ansible-automation-platform-24/eda-controller-rhel8 Red Hat Medium No fix reported