https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 16:31:09 +0000 https://vulnerability.circl.lu/vuln/cve-2026-71463 <p><strong>Affected:</strong> Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7</p> <p>Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job[&#39;job&#39;+&#39;_env&#39;]) and {% if job.id &gt; 100 %} conditional gating bypass both the AST check and the test-render (stub has small job.id). At runtime, the gated branch executes and exceptions write full tracebacks into notification body, which is POSTed to attacker-controlled webhook URL. Leaks install paths, Python version, source line numbers.</p> <p><strong>Affected:</strong> Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9, Red Hat Ansible Automation Platform 2.6 for RHEL 9, Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7</p> <p>Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job[&#39;job&#39;+&#39;_env&#39;]) and {% if job.id &gt; 100 %} conditional gating bypass both the AST check and the test-render (stub has small job.id). At runtime, the gated branch executes and exceptions write full tracebacks into notification body, which is POSTed to attacker-controlled webhook URL. Leaks install paths, Python version, source line numbers.</p> https://vulnerability.circl.lu/vuln/cve-2026-71463