Security
فارسی
All products

Red Hat OpenStack Platform 18.0/rhoso/openstack-tempest-all-rhel9

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
dnspython dns.name.from_wire_parser() excessive CPU useCVE-2026-114605 · GHSA-45C3-73F7-PV4M dnspythonAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat High Fix reported
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groupsCVE-2026-63349 · GHSA-3W57-8XMC-8V26Version ranges need review. anyioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat High Fix reported
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofingCVE-2026-63374 · GHSA-82R6-8W77-94W6Version ranges need review. anyioConfidential Compute Attestation/agent-sandbox/agent-sandbox-router PyPIRed Hat Critical Fix reported
AnyIO process-pool workers can block indefinitely on undrained stderrCVE-2026-64847 · GHSA-5P39-CFHJ-2XMPVersion ranges need review. anyioAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat Medium Fix reported
hpack: Unbounded variable integer decoding can cause run-away computation on malformed inputCVE-2026-59980 · GHSA-8V8H-HG4W-MVQ2Version ranges need review. hpackMigration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8 PyPIRed Hat Medium Fix reported
WebOb: Open redirect in Location header normalization via leading C0 control / space charactersCVE-2026-54770 · GHSA-6HX8-3WJJ-GR8GVersion ranges need review. webobRed Hat Ceph Storage 4/python-webob PyPIRed Hat Medium Fix reported
h2: Duplicate Host header could facilitate request smugglingCVE-2026-71554 · GHSA-6HR6-W5QG-QMWGVersion ranges need review. h2Migration Toolkit for Containers/rhmtc/openshift-migration-hook-runner-rhel8 PyPIRed Hat Medium Fix reported
sqlparse: Quadratic O(n²) DoS in group_commentsCVE-2026-71491 · GHSA-F2FF-P2WW-7P4PVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashesCVE-2026-59894 · GHSA-3496-9G83-7V6XVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat Medium Fix reported
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)CVE-2026-59893 · GHSA-PRG7-HCFM-MFCRVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerCVE-2026-54284 · GHSA-PWGV-4X5Q-6M9FVersion ranges need review. sqlparseRed Hat Ansible Automation Platform 2/ansible-automation-platform-24/controller-rhel8 PyPIRed Hat High Fix reported
pytest has vulnerable tmpdir handlingCVE-2025-71176 · GHSA-6W46-J5RX-G56GVersion ranges need review. pytestOpenShift Service Mesh 2/openshift-service-mesh/grafana-rhel8 PyPIRed Hat Medium Fix reported
libsodium has Incomplete List of Disallowed InputsCVE-2025-69277 · GHSA-MRFV-M5WM-5W6WVersion ranges need review. paragonie/sodium_compathdwallet ComposerPyPIRed Hat Medium Fix reported
`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributesCVE-2026-49825 · GHSA-4JHM-JV67-739FVersion ranges need review. lxml-html-cleanLightspeed Core/lightspeed-core/lightspeed-stack-rhel9 PyPIRed Hat High Fix reported