Security
English
همهٔ محصولات

Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/gateway-rhel9-operator

Red Hat · بسته
6 گزارش
اطلاع‌رسانی آسیب‌پذیری
دنبال‌کردن
گزارشمحصولاکوسیستمشدتوضعیت اصلاحآخرین تغییر
OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different clientCVE-2026-118669 · GHSA-7984-QGVG-3J9C oauthlibConfidential Compute Attestation/openshift-sandboxed-containers/osc-podvm-builder-rhel9 PyPIRed Hat زیاد اصلاح گزارش شده
pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decodingCVE-2026-119195 · GHSA-9M75-VC3G-4X39 pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat زیاد اصلاح گزارش شده
pyasn1 has quadratic-complexity denial of service in binary REAL decodingCVE-2026-119197 · GHSA-MM57-4V3P-RCHX pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat زیاد اصلاح گزارش شده
pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decodingCVE-2026-119194 · GHSA-FM9C-5RCF-2Q5P pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat زیاد اصلاح گزارش شده
pyasn1 has quadratic CPU consumption in constructed BIT STRING decodingCVE-2026-119196 · GHSA-2QM8-X737-GMW5 pyasn1Ansible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 PyPIRed Hat زیاد اصلاح گزارش شده
aap-gateway-operator: resource-server secret exposed in plaintext in the AutomationController custom resourceCVE-2026-126643 Red Hat Ansible Automation Platform 2/ansible-automation-platform-25/gateway-rhel8-operatorRed Hat Ansible Automation Platform 2/ansible-automation-platform-25/gateway-rhel9-operator Red Hat متوسط اصلاح اعلام نشده