Vulnerability-Lookup

RHSA-2026:71114

Vulnerability from csaf_redhat - Published: 2026-09-23 22:13 - Updated: 2026-09-24 21:47

Summary

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

Severity

Critical

Notes

Topic: An update is now available for Red Hat Ansible Automation Platform 2.5 Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Details: Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * automation-controller: GitPython: Remote Code Execution via Git directory impersonation (CVE-2026-87817) * automation-controller: Job template enumeration via unauthenticated Bitbucket webhook oracle (CVE-2026-84717) * automation-controller: Command argument injection via SystemJob extra_vars (CVE-2026-84724) * automation-controller: Masked credential data disclosure via workflow job node artifact search (CVE-2026-84720) * automation-controller: Instance-group privilege escalation via workflow job template copy (CVE-2026-84719) * automation-controller: Audit log falsification via unrestricted X-Forwarded-For trust (CVE-2026-84718) * automation-controller: Mesh certificate issuance for arbitrary hostnames via install bundle (CVE-2026-84716) * automation-controller: Template injection via sanitize_jinja regex bypass (CVE-2026-84714) * automation-controller: Automation mesh topology disclosure via unauthenticated ping endpoint (CVE-2026-84712) * automation-controller: Arbitrary file read via Project scm_branch git argument injection (CVE-2026-84711) * automation-controller: Denial of service via credential type injector Jinja rendering (CVE-2026-84709) * automation-controller: Control-plane secret exposure via container group pod spec override (CVE-2026-84708) * automation-controller: Unauthorized job output disclosure via host filter query traversal (CVE-2026-84707) * automation-controller: Code execution via credential type environment-injector blocklist bypass (CVE-2026-84706) * automation-controller: Cross-tenant credential exposure via execution environment binding (CVE-2026-84703) * automation-controller: Cross-tenant execution privilege bypass via workflow job template node patch (CVE-2026-84692) * automation-controller: Secret key and database credential disclosure via format-string injection (CVE-2026-84691) * automation-controller: Cross-tenant job hijack via Bulk Job Launch node reference (CVE-2026-84689) * automation-controller: Credential token disclosure via notification template type-switch replay (CVE-2026-84686) * automation-controller: Privilege escalation via constructed inventory attachment (CVE-2026-84684) * automation-controller: Stored cross-site scripting via ANSI hyperlink sequence in job output (CVE-2026-84683) * automation-controller: Credential-use privilege escalation via organization Galaxy credential attachment (CVE-2026-84680) * automation-controller: Arbitrary environment variable injection via AWX_TASK_ENV setting (CVE-2026-84679) * automation-controller: Code execution via GALAXY_TASK_ENV environment variable injection (CVE-2026-84678) * automation-controller: Server-side request forgery via Thycotic Secret Server credential test (CVE-2026-84644) * automation-controller: Cross-organization credential exposure via Project signature-validation binding (CVE-2026-84643) * automation-controller: Instance-group privilege escalation via Schedule and workflow node attachment (CVE-2026-84638) * automation-controller: Remote code execution via Project scm_url git argument injection (CVE-2026-84502) * automation-controller: Survey password disclosure via validation error message (CVE-2026-84499) * automation-controller: Privilege escalation via provisioning-callback host-match bypass (CVE-2026-84474) * automation-controller: Instance-group privilege escalation via Bulk Job Launch permission check (CVE-2026-84470) * automation-controller: awx: Privilege escalation to OpenShift namespace via pod_spec_override injection in container groups (CVE-2026-75884) * automation-controller: Command-line argument injection via ad hoc command limit field (CVE-2026-71465) * automation-controller: Git argument-injection guard bypass via Schedule scm_branch prompt (CVE-2026-71464) * automation-controller: Stack trace disclosure via notification-template Jinja whitelist bypass (CVE-2026-71463) * automation-controller: Filesystem path-existence oracle via CUSTOM_VENV_PATHS validation (CVE-2026-71462) * automation-controller: Cross-tenant job event data exposure via missing RBAC check (CVE-2026-71459) * automation-controller: Cross-tenant resource enumeration via Named-URL 404 response oracle (CVE-2026-71458) * automation-controller: Unrestricted subscription and license information disclosure (CVE-2026-71460) * automation-controller: GitPython: Arbitrary code execution via command injection due to unguarded Git options (CVE-2026-67323) * automation-controller: GitPython: Command Injection via Git option prefix abbreviation (CVE-2026-67325) * automation-controller: GitPython: Environment variable exfiltration via attacker-controlled clone URL (CVE-2026-67322) * automation-controller: Kubernetes service account token exfiltration via HashiCorp Vault credential SSRF (CVE-2026-12564) * automation-gateway: brace-expansion: Denial of Service via unbounded intermediate arrays (CVE-2026-69152) * automation-gateway: PostCSS: Information disclosure via crafted sourceMappingURL (CVE-2026-69153) * automation-gateway: js-yaml: Denial of Service via crafted YAML documents (CVE-2026-59869) * automation-gateway-proxy: Golang MIME: Denial of Service via maliciously-crafted MIME header (CVE-2026-42504) * automation-gateway-proxy: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * automation-gateway-proxy: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * automation-gateway-proxy: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * automation-gateway-proxy: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * python3.12-gitpython: Remote Code Execution via Git directory impersonation (CVE-2026-87817) * python3.12-sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing (CVE-2026-54284) * python3.12-sqlparse: Denial of Service via inefficient SQL parsing (CVE-2026-59893) * python3.12-sqlparse: Denial of Service via quadratic CPU consumption in comment grouping (CVE-2026-71491) * receptor: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * receptor: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * receptor: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * receptor: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * receptor: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * receptor: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details about this release, refer to the release notes listed in the References section.

Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

CVE-2026-12564

A flaw was found in the AAP Controller's HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod's Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication is tested. An authenticated attacker with credential-creation privileges can exfiltrate the service account token, gaining Kubernetes API access to the control plane namespaces with full pod CRUD and secret read permissions, including database credentials and the Django SECRET_KEY.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 130 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround

Threats

Impact Critical

CVE-2026-33818

A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 22 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64	—	Vendor Fix fix

Known not affected 116 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch		—

Threats

Impact Important

CVE-2026-42504

A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x	—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64	—	Vendor Fix fix Workaround

Known not affected 130 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround

Threats

Impact Important

CVE-2026-54284

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit a vulnerability in the TokenList construction and string conversion processes, specifically when handling nested token subtrees. This flaw leads to quadratic CPU consumption, which can result in a Denial of Service (DoS) by exhausting system resources before internal limits are reached.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 8 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Vendor Fix fix

Known not affected 130 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch		—

Threats

Impact Important

CVE-2026-56853

A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 14 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64	—	Vendor Fix fix

Known not affected 124 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch		—

Threats

Impact Important

CVE-2026-56858

A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.

8.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 22 products, the same list as for CVE-2026-33818

Known not affected 116 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56859

A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-776 - Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')

Affected products

Fixed 14 products, the same list as for CVE-2026-56853

Known not affected 124 products, the same list as for CVE-2026-56853

Threats

Impact Important

CVE-2026-56860

A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 22 products, the same list as for CVE-2026-33818

Known not affected 116 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-56862

A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 22 products, the same list as for CVE-2026-33818

Known not affected 116 products, the same list as for CVE-2026-33818

Threats

Impact Important

CVE-2026-59869

A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-606 - Unchecked Input for Loop Condition

Affected products

Fixed 2 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch		—	Vendor Fix fix Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch		—	Vendor Fix fix Workaround

Known not affected 136 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64	—	Workaround
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64	—	Workaround
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch	—	Workaround

Threats

Impact Important

CVE-2026-59893

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input. This flaw causes inefficient processing of certain SQL patterns, leading to excessive CPU consumption and potentially a Denial of Service (DoS) condition, making the application unresponsive.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1333 - Inefficient Regular Expression Complexity

Affected products

Fixed 8 products, the same list as for CVE-2026-54284

Known not affected 130 products, the same list as for CVE-2026-54284

Threats

Impact Important

CVE-2026-67322

A flaw was found in GitPython. A remote attacker can exploit a vulnerability in the Repo.clone_from() method by providing a specially crafted Git repository URL. This URL can contain references to environment variables, which are then expanded and included in the URL. This allows the attacker to exfiltrate sensitive environment variables, such as access keys or tokens, to an attacker-controlled server during the cloning process, leading to information disclosure.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CWE-214 - Invocation of Process Using Visible Sensitive Information

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-67323

A flaw was found in GitPython where it fails to properly sanitize dangerous Git options. This vulnerability allows an attacker to inject arbitrary commands when using functions like Repo.archive() and git.ls_remote(), potentially leading to arbitrary code execution. Additionally, functions such as Repo.iter_commits() and Repo.blame() do not validate revision arguments, which could allow an attacker to truncate arbitrary files. Exploitation requires an application to pass attacker-controlled input directly to these vulnerable methods.

8.4 (High)


                
                  CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-67325

A flaw was found in GitPython. This vulnerability stems from an incomplete command injection blocklist that fails to account for Git's long-option prefix abbreviation feature. An attacker can bypass existing security measures by using abbreviated option names, which Git then resolves to dangerous options. This allows for the execution of arbitrary commands, leading to potential arbitrary code execution.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-69152

A flaw was found in the brace-expansion library. The `expand()` function does not apply `maxLength` when constructing comma-alternative intermediate arrays or padded sequences, allowing attacker-controlled input to exhaust memory or block the event loop, resulting in a denial of service. This issue is due to an incomplete mitigation of CVE-2026-14257.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-770 - Allocation of Resources Without Limits or Throttling

Affected products

Fixed 2 products, the same list as for CVE-2026-59869

Known not affected 136 products, the same list as for CVE-2026-59869

Threats

Impact Important

CVE-2026-69153

A flaw was found in PostCSS. A remote attacker can exploit this vulnerability by providing a specially crafted sourceMappingURL when a specific configuration (the 'from' parameter) is not set. This can cause the application to read and expose unintended source-map files, potentially revealing sensitive information about the application's source code.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 2 products, the same list as for CVE-2026-59869

Known not affected 136 products, the same list as for CVE-2026-59869

Threats

Impact Moderate

CVE-2026-71458

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC. The 403→404 shim only rewrites 403 responses, leaving the pk=0 miss path with a different 404 detail string. Differential "Not found." vs "No <Model> matches..." reveals whether a named resource (org, credential, inventory, host) exists anywhere on the platform. Enables cross-tenant internal hostname enumeration.

5.0 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-204 - Observable Response Discrepancy

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71459

JobJobEventsChildrenSummary view has no model/parent_model. ModelAccessPermission.check_get_permissions() falls through (returns True) for any authenticated user. The view uses raw get_object_or_404(Job, pk) without DRF object-level permission check. Zero-privilege user reads event tree structure, event_processing_finished status, and enumerates Job IDs platform-wide via 200/404 oracle. Sibling endpoint /jobs/{id}/job_events/ correctly returns 403.

5.0 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-862 - Missing Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71460

/api/v2/config/ is protected only by IsAuthenticated. license_info (account_number, subscription_id, pool_id, sku, support_level, instance counts) returned to any authenticated user. The superuser/auditor gate only covers project_base_dir/project_local_paths/custom_virtualenvs, not license_info. Enables social engineering against Red Hat support and estate sizing reconnaissance.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CWE-862 - Missing Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71462

StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths. 200 vs 400 response reveals existence of arbitrary absolute paths on the controller-web pod. Tenant superuser can confirm /etc/tower/SECRET_KEY, k8s service-account token, receptor sockets, ConfigMap mount points. Mainly impactful on managed AAP (ansiblecloud.com) where tenant admin != host admin.

4.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWE-204 - Observable Response Discrepancy

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-71463

Notification template Jinja AST whitelist only inspects static Getattr nodes. Dynamic subscripts (job['job'+'_env']) and {% if job.id > 100 %} conditional gating bypass both the AST check and the test-render (stub has small job.id). At runtime, the gated branch executes and exceptions write full tracebacks into notification body, which is POSTed to attacker-controlled webhook URL. Leaks install paths, Python version, source line numbers.

2.7 (Low)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

CWE-209 - Generation of Error Message Containing Sensitive Information

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Low

CVE-2026-71464

LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers. Schedule and WFJT Node accept --upload-pack=/bin/id as scm_branch. Currently blocked at runtime by jobs.py:1502 ValueError check (defense-in-depth), but the API validation gap means sole reliance on a task-layer guard. Refactoring that guard away would promote this to RCE.

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Low

CVE-2026-71465

RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob. A limit beginning with - is parsed as an ansible CLI option. Currently limited to short-circuit flags (--version, --help) since injected element displaces required pattern positional. Would escalate if ansible-core ever defaults pattern.

3.1 (Low)


                
                  CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Low

CVE-2026-71491

A flaw was found in sqlparse, a Python module for parsing SQL. A remote attacker could exploit this vulnerability by providing specially crafted SQL input that contains numerous comment-only statements. This could cause the `group_comments` function to repeatedly rescan these statements, leading to excessive CPU consumption and a Denial of Service (DoS) for the application using the parser.

7.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 8 products, the same list as for CVE-2026-54284

Known not affected 130 products, the same list as for CVE-2026-54284

Threats

Impact Important

CVE-2026-75884

A flaw was found in AWX. The container group pod_spec_override field uses an incomplete blocklist that only restricts automountServiceAccountToken, allowing injection of initContainers, serviceAccountName overrides, and projected service account token volumes. An AAP platform administrator can exploit this to escalate privileges to OpenShift namespace-level access and exfiltrate namespace secrets.

9.1 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84470

A flaw was found in Ansible Automation Platform's automation-controller (AWX). The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) authorizes the requested instance_groups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same field. A principal that holds read (but not use) permission on an instance group -- for example the built-in read-only System Auditor role -- together with execute permission on a job template can launch bulk jobs onto instance groups they are not authorized to use, bypassing execution-placement isolation.

6.4 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:L

CWE-862 - Missing Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84474

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The provisioning-callback secret (host_config_key) is exposed to users holding only the read-level view_jobtemplate permission -- both in the job template API representation and in the activity stream -- and the provisioning callback endpoint trusts a client-supplied X-Forwarded-For header to determine the calling host when the controller is deployed behind the AAP gateway with an empty proxy allow-list. By reading the secret and spoofing X-Forwarded-For to match any host in the job template's inventory, a minimally privileged or unauthenticated remote attacker can launch the job template against arbitrary managed hosts using the job template's credentials, resulting in privilege escalation and remote code execution on managed hosts.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-807 - Reliance on Untrusted Inputs in a Security Decision

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84499

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Survey questions of type password are write-only and stored encrypted, displayed only as a placeholder on read. When a schedule or workflow job template node is revalidated against a tightened survey specification, the controller decrypts the stored password and includes its plaintext value in the minimum/maximum length validation error message returned in the HTTP response. A user with the delegated JobTemplate Admin role can tighten the survey length constraint and trigger revalidation of a schedule or node created by another, higher-privileged user, thereby recovering that user's stored password in plaintext.

7.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CWE-209 - Generation of Error Message Containing Sensitive Information

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84502

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Project scm_url field is not validated against values that begin with a dash and is stored and passed verbatim to the git SCM module. Because the module runs git ls-remote with the URL as a positional argument and without a "--" separator, a git project URL such as "--upload-pack=<command>:x" is interpreted by git as the --upload-pack option and executed via a shell. A user with permission to create or modify a project in a single organization can thereby execute arbitrary commands on the control-plane task pod, with output reflected through the project update stdout endpoint, leading to cross-tenant compromise and in-cluster lateral movement

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84638

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching an instance group to a schedule or a workflow job template node through the dedicated API relationship endpoint, the controller verifies only that the requesting user can read (view) the instance group, rather than that they hold use permission on it, unlike every other instance group assignment in the product. An authenticated user with read-only visibility of an instance group -- for example a system auditor -- can attach a use-restricted instance group, including the control plane group or another tenant's container group, to a schedule or workflow node they control. Their playbook then executes on the control plane node or within another tenant's execution environment, leading to privilege escalation and, in the control plane case, full compromise of the platform.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-863 - Incorrect Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84643

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. A project has a signature validation credential foreign key used to validate signed project content. Unlike the project's SCM credential, the authorization logic does not verify that the requesting user has use permission on the referenced credential, and the API field has no validator or type restriction. An authenticated user holding only the organization project administrator role can therefore bind an arbitrary credential belonging to another organization, by its identifier, when creating or updating a project. The controller discloses that credential's name and type in the project's summary information and, during project synchronization, decrypts the bound credential and uses it in the attacker-controlled project's update, allowing a cross-tenant authorization boundary violation and information disclosure.

5.0 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84644

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The Thycotic Secret Server external credential plugin passes a user-supplied server URL to its SDK without validating the scheme, host, or IP range, and the plugin backend is executed synchronously within the automation controller web process. Using the external credential test endpoint, a user who holds only the use role on such a credential can override the stored server URL with an arbitrary internal address, causing the control plane to issue requests to internal services. Although the response is a generic error, response timing reveals whether internal hosts and ports are reachable, enabling internal network reconnaissance and a blind request-forgery primitive from the control plane, and each request can hold a web worker, affecting availability.

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

CWE-918 - Server-Side Request Forgery (SSRF)

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84678

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The GALAXY_TASK_ENV setting, whose values are added to the environment of the ansible-galaxy commands run during project updates, is not validated to exclude dynamic-linker and interpreter environment variables such as LD_PRELOAD and PYTHONPATH, unlike the sibling AWX_TASK_ENV setting. A user with the system administrator role can set these variables to point at a file placed inside a project checkout on the shared projects volume, causing arbitrary native or Python code to execute inside the project synchronization execution environment on the control plane. This yields read and write access to every organization's project content and to injected Galaxy server tokens, resulting in a cross-tenant compromise of the automation content supply chain.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-427 - Uncontrolled Search Path Element

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84679

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The AWX_TASK_ENV setting accepts arbitrary environment variable keys with no restriction, and its values are applied directly to the running automation controller web and task processes rather than only to sandboxed execution environments. A user with the system administrator role can set variables such as REQUESTS_CA_BUNDLE, HTTPS_PROXY, SSLKEYLOGFILE, OPENSSL_CONF, or LD_PRELOAD that reconfigure the control-plane process TLS trust store, key-logging, OpenSSL engine, or dynamic linker. This enables silent interception of the outbound TLS the control plane uses to fetch external secret-store credentials and Red Hat subscription and Insights secrets, arbitrary file write of TLS session keys, and potential native code execution in the control-plane process, escalating an application administrator to compromise of the control plane and all tenant secrets.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-15 - External Control of System or Configuration Setting

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84680

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching a Galaxy or Automation Hub credential to an organization through the galaxy_credentials relationship endpoint, the controller verifies only that the requesting user can read the credential, rather than that they hold use permission on it, unlike other credential consumption in the product. An authenticated user who administers one organization and has read-only visibility of a credential in another organization -- for example a platform auditor -- can bind that foreign credential to their own organization. On the next project synchronization the controller decrypts the credential server-side and uses its token to authenticate to the credential owner's Automation Hub, allowing cross-tenant use of another organization's secret.

4.1 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84683

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The HTML view of job, ad hoc command, project update, and inventory update standard output escapes HTML metacharacters but does not remove ANSI terminal escape sequences before conversion to HTML. An ANSI OSC 8 hyperlink sequence in the output is expanded into an HTML anchor whose href is not scheme- filtered or escaped, so a low-privileged user who can produce output -- or an external party whose data a playbook echoes -- can embed a javascript: link that is rendered into a text/html response with no Content-Security-Policy. When a higher-privileged user views the output page and clicks the link, attacker- controlled JavaScript executes in their authenticated session, allowing actions as that user up to full platform takeover.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84684

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. When attaching a source inventory to a constructed inventory through the input_inventories relationship endpoint, the controller verifies only that the requesting user can read the source inventory, rather than that they hold use permission on it, unlike instance group attachment on the same access class. An authenticated user who can administer a constructed inventory and has read-only visibility of an inventory in another organization -- for example an organization or system auditor -- can attach that foreign inventory as an input. On synchronization the controller clones every host and host variable, including secrets, into the attacker's inventory, and because the attacker administers the constructed inventory they can run ad hoc commands against the cloned hosts, resulting in cross-tenant disclosure of inventory data and secrets and code execution against another tenant's managed hosts.

9.6 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84686

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. Notification template password fields are encrypted with a key derived from the secret key, the object primary key, and the field name, but not the subfield name, and the API returns the full ciphertext of a password subfield after the notification type is changed to one that does not define that subfield. A user with administrative access to a single notification template, but without any wider privilege, can switch the template type to reveal the stored ciphertext, replant that ciphertext into a webhook password field pointing at a server they control, and trigger a test notification. The controller decrypts the replayed ciphertext to the original plaintext and sends it to the attacker's server in an HTTP Basic authorization header, allowing recovery of Slack, PagerDuty, Twilio, AWS SNS, and Grafana credentials the administrator was only permitted to use, not read.

7.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:L/A:N

CWE-522 - Insufficiently Protected Credentials

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84689

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The bulk job launch endpoint builds workflow job nodes from client input using a serializer that leaves the node's job reference -- a field normally set by the workflow task manager after it spawns a child job -- writable and does not include it in the permission validation performed for the other node fields. An authenticated user with permission to execute a single job template can submit a bulk job launch whose node references the identifier of any unified job in any organization, including jobs they cannot access. The node then exposes that job's metadata, and cancelling the attacker's workflow cancels the referenced job through the workflow cancellation cascade, without any per-job authorization check. Repeated, this allows a low-privileged user to cancel running jobs, project and inventory syncs, ad hoc commands, and system jobs across all organizations, denying automation service platform-wide.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:H

CWE-915 - Improperly Controlled Modification of Dynamically-Determined Object Attributes

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84691

A flaw was found in Red Hat Ansible Automation Platform's automation- controller. The setting that formats the log message emitted for API 4XX errors is an administrator-controlled Python format-string template that is rendered with a live user object as an argument. Because Python string formatting permits attribute and item traversal on its arguments, an administrator can craft a template that walks from the user object into the application settings and reads the Django secret key and the database password. The formatted message is written to a logger that can be forwarded to an external log aggregator, whose destination is also administrator-controlled, allowing the secrets to be sent off the host. An authenticated administrator can thereby obtain the master encryption key used to protect all stored credentials and the database service password, enabling offline decryption of every stored credential, forgery of user sessions, and direct access to the controller database.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-134 - Use of Externally-Controlled Format String

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84692

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The execute-permission check on a workflow job template node's unified job template is skipped when the node's currently stored unified job template is empty: the check inspects only the existing value, not the incoming one, and a node can be created without a unified job template. An authenticated user who holds admin permission on a single workflow job template can create an empty node and then patch it to reference any job template, project, inventory source, system job, or workflow on the platform -- including ones in other organizations that they cannot otherwise read or launch. Running their own workflow then executes the victim template with the victim's attached credentials, inventory and project, resulting in cross-organization privilege escalation to arbitrary automation execution. The patch response also discloses the victim template's name and description.

8.5 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:H/A:N

CWE-863 - Incorrect Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84703

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. When creating or editing an execution environment, the controller does not verify that the requesting user has use permission on the container registry credential referenced by the execution environment; it validates only the organization and the credential kind. An authenticated user who is an execution-environment admin of one organization can associate a container registry credential belonging to a different organization -- one they cannot otherwise read, list, or use -- to an execution environment they control. When a job runs with that execution environment, the controller decrypts the foreign credential's registry password and supplies it to the container runtime, disclosing another organization's registry credentials across the tenant boundary.

6.8 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84706

A flaw was found in Ansible Automation Platform's automation-controller. The custom Credential Type environment-variable injector validates variable names against a deny-list (an ANSIBLE_* prefix check plus a fixed ENV_BLOCKLIST) that omits process-hijacking loader variables such as BASH_ENV, ENV, LD_PRELOAD, LD_LIBRARY_PATH, PYTHONSTARTUP and GIT_SSH_COMMAND. Combined with the credential file injector, a privileged user can write an attacker-controlled script into the execution environment and point BASH_ENV at it, obtaining arbitrary code execution inside the execution-environment container for any job that attaches a credential of that type.

7.6 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:H/A:N

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84707

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The host_filter query parameter on the hosts list API is parsed into a raw Django ORM filter whose lookup path is validated only against a sensitive-field blocklist, with no authorization check on the database relations it traverses. Because job event and ad-hoc command output fields are not on that blocklist, an authenticated user holding only the Read role on an inventory can construct filters that traverse into the output of jobs they have no permission to view and use the returned host count as a boolean oracle. Using regular-expression lookups, the attacker can extract, character by character, the output (which routinely contains plaintext credentials, tokens, and command results) of jobs and ad-hoc commands belonging to other organizations, resulting in cross-tenant disclosure of job output

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84708

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. A user with the delegated Instance Group Admin role on a container group can set a free-form pod specification override that is deep-merged, without filtering, into every job pod launched on that group. The only hardening applied is forcing automountServiceAccountToken to false, which does not remove an explicitly declared projected serviceAccountToken volume or secret volume mounts. A non-superuser can therefore cause the kubelet to mint a ServiceAccount token for the control-plane automation-controller service account into the job container and mount arbitrary secrets from the control-plane namespace, obtaining the control-plane service-account identity on the Kubernetes API and cleartext control-plane secrets (including the platform database password and Django SECRET_KEY), leading to full platform data compromise.

8.7 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N

CWE-266 - Incorrect Privilege Assignment

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84709

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. When a custom credential type is created or updated, the injector configuration is validated by rendering each attacker-supplied Jinja2 template synchronously inside the web request worker, with no limit on iteration count, output size, or execution time. An authenticated superuser can submit a credential type whose injector contains deeply nested loops or large string operations, consuming CPU and wall-clock time in the web worker until it is killed by the request timeout; issuing enough concurrent requests places all web workers into a kill-and-respawn loop, making the Controller API and UI unavailable for the duration of the attack. Additionally, certain template constructs raise exception types that the validator does not handle, resulting in an unhandled server error (HTTP 500) instead of a clean validation error. The rendering sandbox prevents code execution, so there is no confidentiality or integrity impact.

4.9 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-1050 - Excessive Platform Resource Consumption within a Loop

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84711

A flaw was found in Red Hat Ansible Automation Platform's automation-controller. The Project SCM branch and SCM refspec fields are accepted without rejecting values that begin with a dash and are passed to the git module during project synchronization, where they reach a `git checkout`/`git fetch` command line as bare arguments with no end-of-options separator. An authenticated user permitted to create or edit a project can set the SCM branch to a git option such as `--pathspec-from-file=<path>`, causing git to read an arbitrary file on the synchronization host and reflect its contents back through the project-update output. Because project synchronization runs on the control-plane host on default OpenShift Operator deployments, an attacker can read the control-plane Kubernetes ServiceAccount token, the Controller SECRET_KEY, and the database credentials, leading to full compromise of the Automation Platform and its Kubernetes namespace. System administrator privileges are not required and the impact crosses tenants.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84712

A flaw was found in the automation-controller API. The unauthenticated health-check endpoint /api/v2/ping/ (ApiV2PingView, AllowAny) over-serializes RBAC-gated automation-mesh data into its anonymous response, exposing the full instance inventory (node hostnames, node types, UUIDs, heartbeats, capacities, and exact versions), all instance-group names and membership, the deployment install UUID, and the active control node. A remote, unauthenticated attacker can use this to map the control plane and fingerprint software versions for targeted attacks. This flaw affects confidentiality only; it does not expose secrets, credentials, or tenant data.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-497 - Exposure of Sensitive System Information to an Unauthorized Control Sphere

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84714

A flaw was found in the automation-controller input-validation guard sanitize_jinja(). The function uses two regular expressions to reject user-supplied Jinja, but the patterns stop at the first interior '}' or '%' character, so a Jinja expression containing an inner brace (for example an empty dict) is accepted while remaining valid Jinja. Because sanitize_jinja() is the sole guard on several launch-time fields — ad-hoc command module_args, Machine-credential username / become_method / become_user, and inventory host names — a low-privileged user can inject Jinja that ansible-core evaluates in the execution environment. This enables execution of arbitrary commands in the execution environment (bypassing an administrator's AD_HOC_COMMANDS module allowlist) and disclosure of secrets belonging to credentials the attacker cannot read (by templating a co-attached credential's injected environment variables), across the credential access-control boundary.

7.1 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CWE-184 - Incomplete List of Disallowed Inputs

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Important

CVE-2026-84716

A flaw was found in the automation-controller instance install-bundle endpoint. When a System Administrator downloads an execution/hop node's install bundle, the controller signs an X.509 certificate with the receptor mesh certificate authority in which the Common Name, DNS subject-alternative-name, and receptor node-id are taken verbatim from the caller-chosen instance hostname, with a hard-coded ten-year validity, a random serial, and no issuance log or revocation list. Because the hostname charset validator is case-insensitive while the uniqueness validator is case-sensitive, an administrator can register a case variant of an existing control node's hostname and obtain a mesh-CA-signed certificate that TLS peers, which match hostnames case-insensitively, accept as that control node. In managed/hosted deployments — where the customer holds controller superuser but the platform operator runs the mesh — this yields a long-lived, non-revocable mesh peer credential and, with an on-path position, TLS impersonation or interception of control/hybrid mesh nodes. It does not grant direct remote code execution, because receptor work submission is gated by a separate signing key not included in the bundle.

6.6 (Medium)


                
                  CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:N

CWE-266 - Incorrect Privilege Assignment

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84717

A flaw was found in the Ansible Automation Platform automation-controller. The unauthenticated Bitbucket Data Center webhook receiver skips HMAC signature verification for diagnostics:ping events after it has already looked up the target template, causing the endpoint to return HTTP 200 for a template that has a Bitbucket DC webhook configured and HTTP 403 otherwise. An unauthenticated remote attacker can use this response discrepancy as an oracle to enumerate which Job Template and Workflow Job Template IDs have Bitbucket DC webhooks configured, without knowing the secret webhook_key.

5.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-204 - Observable Response Discrepancy

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84718

A flaw was found in the Ansible Automation Platform automation-controller. In the shipped production configuration, the Controller trusts the client-supplied X-Forwarded-For header as the request's client IP without verifying that it originated from a trusted proxy, and selects the leftmost (attacker-controlled) header value. As a result, an attacker can forge the source IP address recorded for their requests in the Controller's audit and access logs, degrading the integrity of forensic and SIEM attribution. The flaw does not grant additional access.

4.3 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

CWE-348 - Use of Less Trusted Source

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84719

A flaw was found in the Ansible Automation Platform automation-controller. When a WorkflowJobTemplate is copied, the deep-copy permission sanitizer validates only the inventory, unified_job_template, and credentials of each cloned node and fails to check the instance_groups (and execution_environment and labels) that were preserved from the original. A user with organization workflow-admin permission but no role on the referenced instance groups can copy a workflow, become its administrator, and launch jobs pinned to instance groups they are not authorized to use — including the control-plane instance group — bypassing the InstanceGroup use_role boundary and causing attacker-influenced automation to run in the control-plane execution context.

9.9 (Critical)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-862 - Missing Authorization

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Critical

CVE-2026-84720

A flaw was found in the Ansible Automation Platform automation-controller. The WorkflowJobNode.ancestor_artifacts database column, which stores the raw merged set_stats artifacts propagated between workflow nodes, is not wrapped in prevent_search() and is therefore accepted for arbitrary field lookups by the REST filter backend, even though it is omitted from the API serializer. Because the column is persisted before Ansible's no_log masking is applied, a user with only read access to a workflow — or, via a regular-expression lookup that bypasses the JSON cross-relation filter guard through the world-readable credential-types endpoint, any authenticated user with no roles — can use the result count as a boolean/count oracle to recover, character by character, secret values that a playbook author explicitly marked no_log, including across organizations.

6.5 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWE-639 - Authorization Bypass Through User-Controlled Key

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-84724

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem. The system-job template launch endpoint stores a user-supplied "days" variable without running the integer validation defined elsewhere for that field, and the dispatcher flattens the management-command argument list into a single string with spaces before the job runner re-splits it, so spaces in the value become additional command-line arguments. Because system jobs are executed in-process on the control node without the container isolation applied to all other job types, an authenticated user with superuser privileges can inject arbitrary arguments — including Python's path option — into the control-plane awx-manage process, controlling its argument vector and the first entry of its module search path. Full remote code execution requires an additional import gadget that is not present in the current management commands, so the demonstrated impact is argument injection with control of the process search path rather than confirmed code execution.

6.6 (Medium)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

CWE-88 - Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

Affected products

Fixed 8 products, the same list as for CVE-2026-12564

Known not affected 130 products, the same list as for CVE-2026-12564

Threats

Impact Moderate

CVE-2026-87817

A flaw was found in GitPython. This vulnerability allows a remote attacker to execute arbitrary code. By failing to properly validate the git directory location, GitPython allows attackers to impersonate the git directory using tracked files such as gitdir, commondir, and HEAD. An attacker can then place a malicious pre-commit hook in the tracked hooks directory, which executes when a victim calls index.commit() on a cloned or opened repository.

8.8 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Affected products

Fixed 12 products

Product	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.aarch64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.s390x	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el8ap.x86_64	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.noarch	—	Vendor Fix fix
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el8ap.src	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.aarch64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.ppc64le	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.s390x	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-venv-tower-0:4.6.33-1.el9ap.x86_64	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.noarch	—	Vendor Fix fix
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-gitpython-0:3.1.60-1.el9ap.src	—	Vendor Fix fix

Known not affected 126 products

Product	Identifier	Version	Remediation
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.5.10-8.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.noarch		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.src		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.aarch64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.ppc64le		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.s390x		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el8ap.x86_64		—
Unresolved product id: 8Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el8ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:python3.12-sqlparse-0:0.6.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptor-0:1.6.8-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Developer-1.2:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptor-0:1.6.8-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5-Inside-1.3:receptorctl-0:1.6.8-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-0:4.6.33-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-cli-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-server-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-controller-ui-0:4.6.33-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-0:1.1.23-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-base-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-event-stream-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-eda-controller-worker-services-0:1.1.23-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-0:2.5.20260923-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-config-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-debugsource-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-proxy-server-debuginfo-0:2.6.17-3.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-gateway-server-0:2.5.20260923-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:automation-hub-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-galaxy-ng-0:4.10.19-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.noarch		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:python3.12-sqlparse-0:0.6.0-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.src		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debuginfo-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.aarch64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.ppc64le		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.s390x		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptor-debugsource-0:1.6.8-1.el9ap.x86_64		—
Unresolved product id: 9Base-Ansible-Automation-Platform-2.5:receptorctl-0:1.6.8-1.el9ap.noarch		—

Threats

Impact Important

References

335 references

URL	Category
https://access.redhat.com/errata/RHSA-2026:71114	self
https://access.redhat.com/security/updates/classi…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://docs.redhat.com/en/documentation/red_hat_…	external
https://bugzilla.redhat.com/show_bug.cgi?id=2484204	external
https://bugzilla.redhat.com/show_bug.cgi?id=2490556	external
https://bugzilla.redhat.com/show_bug.cgi?id=2498122	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509975	external
https://bugzilla.redhat.com/show_bug.cgi?id=2509976	external
https://bugzilla.redhat.com/show_bug.cgi?id=2510021	external
https://bugzilla.redhat.com/show_bug.cgi?id=2510719	external
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512367	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512368	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512369	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512371	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512372	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512374	external
https://bugzilla.redhat.com/show_bug.cgi?id=2512375	external
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://bugzilla.redhat.com/show_bug.cgi?id=2517518	external
https://bugzilla.redhat.com/show_bug.cgi?id=2517523	external
https://bugzilla.redhat.com/show_bug.cgi?id=2517527	external
https://bugzilla.redhat.com/show_bug.cgi?id=2517893	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527046	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527073	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527090	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527096	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527100	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527112	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527117	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527121	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527123	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527126	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527128	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527139	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527140	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527145	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527151	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527154	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527156	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527187	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527189	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527190	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527191	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527195	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527196	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527198	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527199	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527210	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527211	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527213	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527214	external
https://bugzilla.redhat.com/show_bug.cgi?id=2527222	external
https://bugzilla.redhat.com/show_bug.cgi?id=2530744	external
https://security.access.redhat.com/data/csaf/v2/a…	self
https://access.redhat.com/security/cve/CVE-2026-12564	self
https://bugzilla.redhat.com/show_bug.cgi?id=2490556	external
https://www.cve.org/CVERecord?id=CVE-2026-12564	external
https://nvd.nist.gov/vuln/detail/CVE-2026-12564	external
https://access.redhat.com/security/cve/CVE-2026-33818	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515815	external
https://www.cve.org/CVERecord?id=CVE-2026-33818	external
https://nvd.nist.gov/vuln/detail/CVE-2026-33818	external
https://go.dev/cl/814980	external
https://go.dev/issue/80405	external
https://groups.google.com/g/golang-announce/c/94p…	external
https://pkg.go.dev/vuln/GO-2026-5972	external
https://access.redhat.com/security/cve/CVE-2026-42504	self
https://bugzilla.redhat.com/show_bug.cgi?id=2484204	external
https://www.cve.org/CVERecord?id=CVE-2026-42504	external
https://nvd.nist.gov/vuln/detail/CVE-2026-42504	external
https://go.dev/cl/774481	external
https://go.dev/issue/79217	external
https://groups.google.com/g/golang-announce/c/tKs…	external
https://pkg.go.dev/vuln/GO-2026-5038	external
https://access.redhat.com/security/cve/CVE-2026-54284	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517527	external
https://www.cve.org/CVERecord?id=CVE-2026-54284	external
https://nvd.nist.gov/vuln/detail/CVE-2026-54284	external
https://github.com/andialbrecht/sqlparse/commit/9…	external
https://github.com/andialbrecht/sqlparse/security…	external
https://access.redhat.com/security/cve/CVE-2026-56853	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515827	external
https://www.cve.org/CVERecord?id=CVE-2026-56853	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56853	external
https://go.dev/cl/795540	external
https://go.dev/issue/80205	external
https://pkg.go.dev/vuln/GO-2026-6089	external
https://access.redhat.com/security/cve/CVE-2026-56858	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515838	external
https://www.cve.org/CVERecord?id=CVE-2026-56858	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56858	external
https://go.dev/cl/807100	external
https://go.dev/issue/80435	external
https://pkg.go.dev/vuln/GO-2026-6091	external
https://access.redhat.com/security/cve/CVE-2026-56859	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515840	external
https://www.cve.org/CVERecord?id=CVE-2026-56859	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56859	external
https://go.dev/cl/803320	external
https://go.dev/issue/80481	external
https://pkg.go.dev/vuln/GO-2026-6088	external
https://access.redhat.com/security/cve/CVE-2026-56860	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515820	external
https://www.cve.org/CVERecord?id=CVE-2026-56860	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56860	external
https://go.dev/cl/803681	external
https://go.dev/issue/80494	external
https://pkg.go.dev/vuln/GO-2026-6218	external
https://access.redhat.com/security/cve/CVE-2026-56862	self
https://bugzilla.redhat.com/show_bug.cgi?id=2515839	external
https://www.cve.org/CVERecord?id=CVE-2026-56862	external
https://nvd.nist.gov/vuln/detail/CVE-2026-56862	external
https://go.dev/cl/804261	external
https://go.dev/issue/80528	external
https://pkg.go.dev/vuln/GO-2026-6090	external
https://access.redhat.com/security/cve/CVE-2026-59869	self
https://bugzilla.redhat.com/show_bug.cgi?id=2498122	external
https://www.cve.org/CVERecord?id=CVE-2026-59869	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59869	external
https://github.com/nodeca/js-yaml/commit/24f13e79…	external
https://github.com/nodeca/js-yaml/commit/59423c6f…	external
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	external
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	external
https://github.com/nodeca/js-yaml/security/adviso…	external
https://access.redhat.com/security/cve/CVE-2026-59893	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517523	external
https://www.cve.org/CVERecord?id=CVE-2026-59893	external
https://nvd.nist.gov/vuln/detail/CVE-2026-59893	external
https://github.com/andialbrecht/sqlparse/commit/d…	external
https://github.com/andialbrecht/sqlparse/security…	external
https://access.redhat.com/security/cve/CVE-2026-67322	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510021	external
https://www.cve.org/CVERecord?id=CVE-2026-67322	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67322	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-67323	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509976	external
https://www.cve.org/CVERecord?id=CVE-2026-67323	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67323	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-67325	self
https://bugzilla.redhat.com/show_bug.cgi?id=2509975	external
https://www.cve.org/CVERecord?id=CVE-2026-67325	external
https://nvd.nist.gov/vuln/detail/CVE-2026-67325	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external
https://access.redhat.com/security/cve/CVE-2026-69152	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510722	external
https://www.cve.org/CVERecord?id=CVE-2026-69152	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69152	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/c…	external
https://github.com/juliangruber/brace-expansion/s…	external
https://access.redhat.com/security/cve/CVE-2026-69153	self
https://bugzilla.redhat.com/show_bug.cgi?id=2510719	external
https://www.cve.org/CVERecord?id=CVE-2026-69153	external
https://nvd.nist.gov/vuln/detail/CVE-2026-69153	external
https://github.com/postcss/postcss/commit/7beca13…	external
https://github.com/postcss/postcss/releases/tag/8.5.19	external
https://github.com/postcss/postcss/security/advis…	external
https://access.redhat.com/security/cve/CVE-2026-71458	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512367	external
https://www.cve.org/CVERecord?id=CVE-2026-71458	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71458	external
https://access.redhat.com/security/cve/CVE-2026-71459	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512368	external
https://www.cve.org/CVERecord?id=CVE-2026-71459	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71459	external
https://access.redhat.com/security/cve/CVE-2026-71460	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512369	external
https://www.cve.org/CVERecord?id=CVE-2026-71460	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71460	external
https://access.redhat.com/security/cve/CVE-2026-71462	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512371	external
https://www.cve.org/CVERecord?id=CVE-2026-71462	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71462	external
https://access.redhat.com/security/cve/CVE-2026-71463	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512372	external
https://www.cve.org/CVERecord?id=CVE-2026-71463	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71463	external
https://access.redhat.com/security/cve/CVE-2026-71464	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512374	external
https://www.cve.org/CVERecord?id=CVE-2026-71464	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71464	external
https://access.redhat.com/security/cve/CVE-2026-71465	self
https://bugzilla.redhat.com/show_bug.cgi?id=2512375	external
https://www.cve.org/CVERecord?id=CVE-2026-71465	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71465	external
https://access.redhat.com/security/cve/CVE-2026-71491	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517518	external
https://www.cve.org/CVERecord?id=CVE-2026-71491	external
https://nvd.nist.gov/vuln/detail/CVE-2026-71491	external
https://github.com/andialbrecht/sqlparse/commit/e…	external
https://github.com/andialbrecht/sqlparse/security…	external
https://access.redhat.com/security/cve/CVE-2026-75884	self
https://bugzilla.redhat.com/show_bug.cgi?id=2517893	external
https://www.cve.org/CVERecord?id=CVE-2026-75884	external
https://nvd.nist.gov/vuln/detail/CVE-2026-75884	external
https://access.redhat.com/security/cve/CVE-2026-84470	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527046	external
https://www.cve.org/CVERecord?id=CVE-2026-84470	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84470	external
https://access.redhat.com/security/cve/CVE-2026-84474	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527073	external
https://www.cve.org/CVERecord?id=CVE-2026-84474	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84474	external
https://access.redhat.com/security/cve/CVE-2026-84499	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527090	external
https://www.cve.org/CVERecord?id=CVE-2026-84499	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84499	external
https://access.redhat.com/security/cve/CVE-2026-84502	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527096	external
https://www.cve.org/CVERecord?id=CVE-2026-84502	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84502	external
https://access.redhat.com/security/cve/CVE-2026-84638	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527100	external
https://www.cve.org/CVERecord?id=CVE-2026-84638	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84638	external
https://access.redhat.com/security/cve/CVE-2026-84643	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527112	external
https://www.cve.org/CVERecord?id=CVE-2026-84643	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84643	external
https://access.redhat.com/security/cve/CVE-2026-84644	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527117	external
https://www.cve.org/CVERecord?id=CVE-2026-84644	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84644	external
https://access.redhat.com/security/cve/CVE-2026-84678	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527121	external
https://www.cve.org/CVERecord?id=CVE-2026-84678	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84678	external
https://access.redhat.com/security/cve/CVE-2026-84679	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527123	external
https://www.cve.org/CVERecord?id=CVE-2026-84679	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84679	external
https://access.redhat.com/security/cve/CVE-2026-84680	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527126	external
https://www.cve.org/CVERecord?id=CVE-2026-84680	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84680	external
https://access.redhat.com/security/cve/CVE-2026-84683	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527128	external
https://www.cve.org/CVERecord?id=CVE-2026-84683	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84683	external
https://access.redhat.com/security/cve/CVE-2026-84684	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527139	external
https://www.cve.org/CVERecord?id=CVE-2026-84684	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84684	external
https://access.redhat.com/security/cve/CVE-2026-84686	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527140	external
https://www.cve.org/CVERecord?id=CVE-2026-84686	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84686	external
https://access.redhat.com/security/cve/CVE-2026-84689	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527145	external
https://www.cve.org/CVERecord?id=CVE-2026-84689	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84689	external
https://access.redhat.com/security/cve/CVE-2026-84691	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527151	external
https://www.cve.org/CVERecord?id=CVE-2026-84691	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84691	external
https://access.redhat.com/security/cve/CVE-2026-84692	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527154	external
https://www.cve.org/CVERecord?id=CVE-2026-84692	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84692	external
https://access.redhat.com/security/cve/CVE-2026-84703	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527156	external
https://www.cve.org/CVERecord?id=CVE-2026-84703	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84703	external
https://access.redhat.com/security/cve/CVE-2026-84706	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527187	external
https://www.cve.org/CVERecord?id=CVE-2026-84706	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84706	external
https://access.redhat.com/security/cve/CVE-2026-84707	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527189	external
https://www.cve.org/CVERecord?id=CVE-2026-84707	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84707	external
https://access.redhat.com/security/cve/CVE-2026-84708	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527190	external
https://www.cve.org/CVERecord?id=CVE-2026-84708	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84708	external
https://access.redhat.com/security/cve/CVE-2026-84709	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527191	external
https://www.cve.org/CVERecord?id=CVE-2026-84709	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84709	external
https://access.redhat.com/security/cve/CVE-2026-84711	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527195	external
https://www.cve.org/CVERecord?id=CVE-2026-84711	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84711	external
https://access.redhat.com/security/cve/CVE-2026-84712	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527196	external
https://www.cve.org/CVERecord?id=CVE-2026-84712	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84712	external
https://access.redhat.com/security/cve/CVE-2026-84714	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527198	external
https://www.cve.org/CVERecord?id=CVE-2026-84714	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84714	external
https://access.redhat.com/security/cve/CVE-2026-84716	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527199	external
https://www.cve.org/CVERecord?id=CVE-2026-84716	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84716	external
https://access.redhat.com/security/cve/CVE-2026-84717	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527210	external
https://www.cve.org/CVERecord?id=CVE-2026-84717	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84717	external
https://access.redhat.com/security/cve/CVE-2026-84718	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527211	external
https://www.cve.org/CVERecord?id=CVE-2026-84718	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84718	external
https://access.redhat.com/security/cve/CVE-2026-84719	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527213	external
https://www.cve.org/CVERecord?id=CVE-2026-84719	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84719	external
https://access.redhat.com/security/cve/CVE-2026-84720	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527214	external
https://www.cve.org/CVERecord?id=CVE-2026-84720	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84720	external
https://access.redhat.com/security/cve/CVE-2026-84724	self
https://bugzilla.redhat.com/show_bug.cgi?id=2527222	external
https://www.cve.org/CVERecord?id=CVE-2026-84724	external
https://nvd.nist.gov/vuln/detail/CVE-2026-84724	external
https://access.redhat.com/security/cve/CVE-2026-87817	self
https://bugzilla.redhat.com/show_bug.cgi?id=2530744	external
https://www.cve.org/CVERecord?id=CVE-2026-87817	external
https://nvd.nist.gov/vuln/detail/CVE-2026-87817	external
https://github.com/gitpython-developers/GitPython…	external
https://www.vulncheck.com/advisories/gitpython-be…	external

Acknowledgments

Red Hat Chris Meyers

Red Hat Laura Pardo

Independent security researcher Santosh Kumar Puppala

JSON

To clipboard

Loading 2.8 MB of JSON…

CVE-2026-12564 (GCVE-0-2026-12564)

Vulnerability from cvelistv5 – Published: 2026-08-18 15:50 – Updated: 2026-09-24 05:59

Title

Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf

Summary

Severity

9.6 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-18 19:43 UTC

CWE

CWE-918 - Server-Side Request Forgery (SSRF)

Assigner

redhat redhat root

References

7 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:67279	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71113	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71114	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71115	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:71179	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-12564	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2490556	issue-trackingx_refsource_REDHAT

Impacted products

7 products

Vendor	Product	Version
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 8	Unaffected: 0:4.5.36-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.4 for RHEL 9	Unaffected: 0:4.5.36-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.4::el8 cpe:/a:redhat:ansible_automation_platform:2.4::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 8	Unaffected: 0:4.6.33-1.el8ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8 cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.5 for RHEL 9	Unaffected: 0:4.6.33-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.5::el8 cpe:/a:redhat:ansible_automation_platform:2.5::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8 cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8 cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9
Red Hat	Red Hat Ansible Automation Platform 2.6 for RHEL 9	Unaffected: 0:4.7.17-1.el9ap , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el10 cpe:/a:redhat:ansible_automation_platform:2.6::el9 cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10 cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9 cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.6	Unaffected: 1789673739 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.6::el9
Red Hat	Red Hat Ansible Automation Platform 2.7	Unaffected: 1788918363 , < * (rpm) cpe:/a:redhat:ansible_automation_platform:2.7::el9

Date Public

2026-07-17 00:00

Credits

This issue was discovered by Chris Meyers (Red Hat).

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-12564",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-18T19:43:25.467171Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-18T19:53:20.539Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.5.36-1.el8ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.4::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.4 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.5.36-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.6.33-1.el8ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.5::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el8",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.5::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.6.33-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el10",
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el10",
            "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9",
            "cpe:/a:redhat:ansible_automation_platform_inside:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "automation-controller",
          "product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:4.7.17-1.el9ap",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.6::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-26/controller-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.6",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1789673739",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:ansible_automation_platform:2.7::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "ansible-automation-platform-27/controller-rhel9",
          "product": "Red Hat Ansible Automation Platform 2.7",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1788918363",
              "versionType": "rpm"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Chris Meyers (Red Hat)."
        }
      ],
      "datePublic": "2026-07-17T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the AAP Controller\u0027s HashiCorp Vault credential plugin. The kubernetes_auth() function in awx_plugins/credentials/hashivault.py reads the controller pod\u0027s Kubernetes service account token and sends it to an attacker-controlled URL when a HashiCorp Vault Secret Lookup credential with kubernetes_role authentication is tested. An authenticated attacker with credential-creation privileges can exfiltrate the service account token, gaining Kubernetes API access to the control plane namespaces with full pod CRUD and secret read permissions, including database credentials and the Django SECRET_KEY."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Critical"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 9.6,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-918",
              "description": "Server-Side Request Forgery (SSRF)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T05:59:57.362Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:67279",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:67279"
        },
        {
          "name": "RHSA-2026:71113",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71113"
        },
        {
          "name": "RHSA-2026:71114",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71114"
        },
        {
          "name": "RHSA-2026:71115",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71115"
        },
        {
          "name": "RHSA-2026:71179",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:71179"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2026-12564"
        },
        {
          "name": "RHBZ#2490556",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490556"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2026-06-17T20:58:19.593Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-07-17T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf",
      "workarounds": [
        {
          "lang": "en",
          "value": "The following practices would help for avoiding exposure and mitigate this flaw:\n- Restrict network egress from controller pods using Kubernetes NetworkPolicy to prevent outbound connections to untrusted destinations. Only allow connections to known Vault server endpoints.\n- Review and restrict the RBAC permissions of the automation-controller service account to follow the principle of least privilege. Remove unnecessary secret read access.\n- In AAP Cloud environments, audit credential-creation activity for suspicious HashiCorp Vault credentials with external or unusual URLs.\n- Monitor Kubernetes audit logs for unexpected API calls using the automation-controller service account, particularly secret reads and pod operations from EE pods.\n- Rotate the automation-controller service account token if unauthorized access is suspected.\n- Consider restricting the \"create credential\" privilege to only trusted administrators until the fix is available."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-918: Server-Side Request Forgery (SSRF)"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2026-12564",
    "datePublished": "2026-08-18T15:50:54.646Z",
    "dateReserved": "2026-06-17T20:56:28.490Z",
    "dateUpdated": "2026-09-24T05:59:57.362Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-33818 (GCVE-0-2026-33818)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-09-24 20:33

Title

Enforce maximum recursion depth in encoding/asn1

Summary

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:11 UTC

CWE

CWE-400 - Uncontrolled Resource Consumption

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80405
https://groups.google.com/g/golang-announce/c/94p…
https://go.dev/cl/814980
https://pkg.go.dev/vuln/GO-2026-5972

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/asn1	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Marwan Atia (marwansamir688@gmail.com)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-33818",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:11:19.904646Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-400",
                "description": "CWE-400 Uncontrolled Resource Consumption",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:12:34.877Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/asn1",
          "product": "encoding/asn1",
          "programRoutines": [
            {
              "name": "parseSequenceOf"
            },
            {
              "name": "parseField"
            },
            {
              "name": "UnmarshalWithParams"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Marwan Atia (marwansamir688@gmail.com)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-400: Uncontrolled Resource Consumption",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T20:33:13.968Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80405"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://go.dev/cl/814980"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5972"
        }
      ],
      "title": "Enforce maximum recursion depth in encoding/asn1"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-33818",
    "datePublished": "2026-08-13T21:58:52.821Z",
    "dateReserved": "2026-03-23T20:35:32.815Z",
    "dateUpdated": "2026-09-24T20:33:13.968Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-42504 (GCVE-0-2026-42504)

Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-24 20:33

Title

Quadratic complexity in WordDecoder.DecodeHeader in mime

Summary

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-06-03 14:05 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/79217
https://go.dev/cl/774481
https://groups.google.com/g/golang-announce/c/tKs…
https://pkg.go.dev/vuln/GO-2026-5038

Impacted products

1 product

Vendor	Product	Version
Go standard library	mime	Affected: 0 , < 1.25.11 (semver) Affected: 1.26.0-0 , < 1.26.4 (semver)

Credits

p4p3r (https://hackerone.com/p4p3r_hak)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-42504",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-06-03T14:05:39.682615Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-407",
                "description": "CWE-407 Inefficient Algorithmic Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-06-03T14:06:13.623Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "mime",
          "product": "mime",
          "programRoutines": [
            {
              "name": "WordDecoder.DecodeHeader"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.11",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.4",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "p4p3r (https://hackerone.com/p4p3r_hak)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-24T20:33:12.584Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/79217"
        },
        {
          "url": "https://go.dev/cl/774481"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-5038"
        }
      ],
      "title": "Quadratic complexity in WordDecoder.DecodeHeader in mime"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-42504",
    "datePublished": "2026-06-02T22:01:37.219Z",
    "dateReserved": "2026-04-28T00:21:12.792Z",
    "dateUpdated": "2026-09-24T20:33:12.584Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-54284 (GCVE-0-2026-54284)

Vulnerability from cvelistv5 – Published: 2026-08-17 17:43 – Updated: 2026-08-17 19:32

Title

sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger

Summary

sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by group_parenthesis and group_case, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split() before depth and token limits terminate processing. This issue is fixed in version 0.6.0.

Severity

8.7 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-17 19:31 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity
CWE-1333 - Inefficient Regular Expression Complexity

Assigner

GitHub_M mitre root

References

2 references

URL	Tags
https://github.com/andialbrecht/sqlparse/security…	x_refsource_CONFIRM
https://github.com/andialbrecht/sqlparse/commit/9…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
andialbrecht	sqlparse	Affected: < 0.6.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-54284",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-17T19:31:59.285704Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-17T19:32:42.004Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "sqlparse",
          "vendor": "andialbrecht",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 0.6.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, TokenList construction and string conversion in sqlparse/sql.py repeatedly flatten nested token subtrees constructed by group_parenthesis and group_case, causing quadratic CPU consumption through sqlparse.parse(), sqlparse.format(), and sqlparse.split() before depth and token limits terminate processing. This issue is fixed in version 0.6.0."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "attackComplexity": "LOW",
            "attackRequirements": "NONE",
            "attackVector": "NETWORK",
            "baseScore": 8.7,
            "baseSeverity": "HIGH",
            "privilegesRequired": "NONE",
            "subAvailabilityImpact": "NONE",
            "subConfidentialityImpact": "NONE",
            "subIntegrityImpact": "NONE",
            "userInteraction": "NONE",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N",
            "version": "4.0",
            "vulnAvailabilityImpact": "HIGH",
            "vulnConfidentialityImpact": "NONE",
            "vulnIntegrityImpact": "NONE"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        },
        {
          "descriptions": [
            {
              "cweId": "CWE-1333",
              "description": "CWE-1333: Inefficient Regular Expression Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T17:43:48.243Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f"
        },
        {
          "name": "https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06f",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06f"
        }
      ],
      "source": {
        "advisory": "GHSA-pwgv-4x5q-6m9f",
        "discovery": "UNKNOWN"
      },
      "title": "sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-54284",
    "datePublished": "2026-08-17T17:43:48.243Z",
    "dateReserved": "2026-06-12T17:46:37.292Z",
    "dateUpdated": "2026-08-17T19:32:42.004Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56853 (GCVE-0-2026-56853)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:23

Title

Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http

Summary

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:22 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80205
https://go.dev/cl/795540
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6089

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/http	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56853",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:22:45.475320Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:23:18.680Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/http",
          "product": "net/http",
          "programRoutines": [
            {
              "name": "conn.readRequest"
            },
            {
              "name": "conn.serve"
            },
            {
              "name": "ListenAndServe"
            },
            {
              "name": "ListenAndServeTLS"
            },
            {
              "name": "Serve"
            },
            {
              "name": "ServeTLS"
            },
            {
              "name": "Server.ListenAndServe"
            },
            {
              "name": "Server.ListenAndServeTLS"
            },
            {
              "name": "Server.Serve"
            },
            {
              "name": "Server.ServeTLS"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface. ReadHeaderTimeout is unexpectedly not being applied when doing this."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.092Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80205"
        },
        {
          "url": "https://go.dev/cl/795540"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6089"
        }
      ],
      "title": "Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56853",
    "datePublished": "2026-08-13T21:58:53.092Z",
    "dateReserved": "2026-06-23T15:10:49.352Z",
    "dateUpdated": "2026-08-14T15:23:18.680Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56858 (GCVE-0-2026-56858)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:32

Title

Fix Javascript regexp context tracking in html/template

Summary

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

Severity

6.1 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:31 UTC

CWE

CWE-79 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80435
https://go.dev/cl/807100
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6091

Impacted products

1 product

Vendor	Product	Version
Go standard library	html/template	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Ali Sherif

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "NONE",
              "baseScore": 6.1,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "LOW",
              "integrityImpact": "LOW",
              "privilegesRequired": "NONE",
              "scope": "CHANGED",
              "userInteraction": "REQUIRED",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56858",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:31:30.140536Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-79",
                "description": "CWE-79 Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:32:29.852Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "html/template",
          "product": "html/template",
          "programRoutines": [
            {
              "name": "tJS"
            },
            {
              "name": "Template.Execute"
            },
            {
              "name": "Template.ExecuteTemplate"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Ali Sherif"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, pathological inputs could close an unescaped \u0027/\u0027 early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-79: Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.354Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80435"
        },
        {
          "url": "https://go.dev/cl/807100"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6091"
        }
      ],
      "title": "Fix Javascript regexp context tracking in html/template"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56858",
    "datePublished": "2026-08-13T21:58:53.354Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:32:29.852Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56859 (GCVE-0-2026-56859)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:21

Title

Add recursion depth guard during decode in encoding/xml

Summary

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:21 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80481
https://go.dev/cl/803320
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6088

Impacted products

1 product

Vendor	Product	Version
Go standard library	encoding/xml	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56859",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:21:09.615961Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:21:46.218Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "encoding/xml",
          "product": "encoding/xml",
          "programRoutines": [
            {
              "name": "Decoder.push"
            },
            {
              "name": "Decoder.pop"
            },
            {
              "name": "Decoder.RawToken"
            },
            {
              "name": "Decoder.unmarshalPath"
            },
            {
              "name": "Decoder.unmarshal"
            },
            {
              "name": "Decoder.Decode"
            },
            {
              "name": "Decoder.DecodeElement"
            },
            {
              "name": "Decoder.Skip"
            },
            {
              "name": "Decoder.Token"
            },
            {
              "name": "Unmarshal"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:52.959Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80481"
        },
        {
          "url": "https://go.dev/cl/803320"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6088"
        }
      ],
      "title": "Add recursion depth guard during decode in encoding/xml"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56859",
    "datePublished": "2026-08-13T21:58:52.959Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:21:46.218Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56860 (GCVE-0-2026-56860)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 16:14

Title

Avoid quadratic complexity in resolvePath in net/url

Summary

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for '..' segments, eliminating the quadratic time complexity and significantly reducing memory allocations.

Severity

5.9 (Medium)


                        
                          CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 16:14 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/cl/803681
https://go.dev/issue/80494
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6218

Impacted products

1 product

Vendor	Product	Version
Go standard library	net/url	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "HIGH",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 5.9,
              "baseSeverity": "MEDIUM",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56860",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T16:14:34.601382Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-407",
                "description": "CWE-407 Inefficient Algorithmic Complexity",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T16:14:39.166Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "net/url",
          "product": "net/url",
          "programRoutines": [
            {
              "name": "resolvePath"
            },
            {
              "name": "URL.Parse"
            },
            {
              "name": "URL.ResolveReference"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Previously, resolving relative paths containing parent directory (\u0027..\u0027) segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead. Now, path resolution operates on a byte buffer using index-based backtracking for \u0027..\u0027 segments, eliminating the quadratic time complexity and significantly reducing memory allocations."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.731Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/cl/803681"
        },
        {
          "url": "https://go.dev/issue/80494"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6218"
        }
      ],
      "title": "Avoid quadratic complexity in resolvePath in net/url"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56860",
    "datePublished": "2026-08-13T21:58:53.731Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T16:14:39.166Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-56862 (GCVE-0-2026-56862)

Vulnerability from cvelistv5 – Published: 2026-08-13 21:58 – Updated: 2026-08-14 15:29

Title

Limit handshake messages we are willing to accept post-handshake in crypto/tls

Summary

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-08-14 15:27 UTC

CWE

CWE-770 - Allocation of Resources Without Limits or Throttling

Assigner

Go Google root

References

4 references

URL	Tags
https://go.dev/issue/80528
https://go.dev/cl/804261
https://groups.google.com/g/golang-announce/c/94p…
https://pkg.go.dev/vuln/GO-2026-6090

Impacted products

1 product

Vendor	Product	Version
Go standard library	crypto/tls	Affected: 0 , < 1.25.13 (semver) Affected: 1.26.0-0 , < 1.26.6 (semver) Affected: 1.27.0-0 , < 1.27.0-rc.3 (semver)

Credits

Qi Deng of Aurascape.ai

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 7.5,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "NONE",
              "integrityImpact": "NONE",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2026-56862",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-08-14T15:27:34.651997Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-770",
                "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-08-14T15:29:41.741Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "crypto/tls",
          "product": "crypto/tls",
          "programRoutines": [
            {
              "name": "Conn.readRecordOrCCS"
            },
            {
              "name": "Conn.Handshake"
            },
            {
              "name": "Conn.HandshakeContext"
            },
            {
              "name": "Conn.Read"
            },
            {
              "name": "Conn.Write"
            },
            {
              "name": "Dial"
            },
            {
              "name": "DialWithDialer"
            },
            {
              "name": "Dialer.Dial"
            },
            {
              "name": "Dialer.DialContext"
            },
            {
              "name": "QUICConn.HandleData"
            },
            {
              "name": "QUICConn.Start"
            }
          ],
          "vendor": "Go standard library",
          "versions": [
            {
              "lessThan": "1.25.13",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.26.6",
              "status": "affected",
              "version": "1.26.0-0",
              "versionType": "semver"
            },
            {
              "lessThan": "1.27.0-rc.3",
              "status": "affected",
              "version": "1.27.0-0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Qi Deng of Aurascape.ai"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not. As a result, a malicious client can keep sending KeyUpdate messages to force the server to keep performing key derivation operations indefinitely."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE-770: Allocation of Resources Without Limits or Throttling",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-13T21:58:53.216Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://go.dev/issue/80528"
        },
        {
          "url": "https://go.dev/cl/804261"
        },
        {
          "url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2026-6090"
        }
      ],
      "title": "Limit handshake messages we are willing to accept post-handshake in crypto/tls"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2026-56862",
    "datePublished": "2026-08-13T21:58:53.216Z",
    "dateReserved": "2026-06-23T15:10:49.353Z",
    "dateUpdated": "2026-08-14T15:29:41.741Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-59869 (GCVE-0-2026-59869)

Vulnerability from cvelistv5 – Published: 2026-07-08 15:15 – Updated: 2026-07-09 15:14

Title

js-yaml: YAML merge-key chains can force quadratic CPU consumption

Summary

js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0.

Severity

7.5 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

SSVC

Exploitation: poc Automatable: yes Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-07-09 15:14 UTC

CWE

CWE-407 - Inefficient Algorithmic Complexity

Assigner

GitHub_M mitre root

References

5 references

URL	Tags
https://github.com/nodeca/js-yaml/security/adviso…	x_refsource_CONFIRM
https://github.com/nodeca/js-yaml/commit/24f13e79…	x_refsource_MISC
https://github.com/nodeca/js-yaml/commit/59423c6f…	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/3.15.0	x_refsource_MISC
https://github.com/nodeca/js-yaml/releases/tag/4.3.0	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
nodeca	js-yaml	Affected: >= 3.0.0, < 3.15.0 Affected: >= 4.0.0, < 4.3.0

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-59869",
                "options": [
                  {
                    "Exploitation": "poc"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-07-09T15:14:16.302841Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-07-09T15:14:29.753Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "references": [
          {
            "tags": [
              "exploit"
            ],
            "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "js-yaml",
          "vendor": "nodeca",
          "versions": [
            {
              "status": "affected",
              "version": "\u003e= 3.0.0, \u003c 3.15.0"
            },
            {
              "status": "affected",
              "version": "\u003e= 4.0.0, \u003c 4.3.0"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "js-yaml is a JavaScript YAML parser and dumper. From 3.0.0 before 3.15.0 and from 4.0.0 before 4.3.0, js-yaml can spend quadratic CPU time parsing a document whose size grows only linearly when a chain of mappings uses merge keys where each mapping merges the previous one. This issue is fixed in versions 3.15.0 and 4.3.0."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-407",
              "description": "CWE-407: Inefficient Algorithmic Complexity",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-07-08T15:15:54.675Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
        },
        {
          "name": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
        }
      ],
      "source": {
        "advisory": "GHSA-52cp-r559-cp3m",
        "discovery": "UNKNOWN"
      },
      "title": "js-yaml: YAML merge-key chains can force quadratic CPU consumption"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2026-59869",
    "datePublished": "2026-07-08T15:15:54.675Z",
    "dateReserved": "2026-07-07T15:41:53.607Z",
    "dateUpdated": "2026-07-09T15:14:29.753Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

RHSA-2026:71114

CVE-2026-12564 (GCVE-0-2026-12564)

CVE-2026-33818 (GCVE-0-2026-33818)

CVE-2026-42504 (GCVE-0-2026-42504)

CVE-2026-54284 (GCVE-0-2026-54284)

CVE-2026-56853 (GCVE-0-2026-56853)

CVE-2026-56858 (GCVE-0-2026-56858)

CVE-2026-56859 (GCVE-0-2026-56859)

CVE-2026-56860 (GCVE-0-2026-56860)

CVE-2026-56862 (GCVE-0-2026-56862)

CVE-2026-59869 (GCVE-0-2026-59869)

Tags

Sightings

Nomenclature

Related by attack behaviour