TI-2023-09729 CVE-2023-23931 · GHSA-w7pp-m8wf-vj6r
Cipher.update_into can corrupt memory in pyca cryptography
Priority MEDIUM 62
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
RHSA-2023:4693
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2023-08-21 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 automation-eda-controller-1.0.1-1.el8ap, automation-eda-controller-server-1.0.1-1.el8ap, automation-eda-controller-ui-1.0.1-1.el8ap +6
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 automation-eda-controller-1.0.1-1.el9ap, automation-eda-controller-server-1.0.1-1.el9ap, automation-eda-controller-ui-1.0.1-1.el9ap +4
Fixes 4 records
TI-2023-18103 CVE-2023-36053 · GHSA-jh3w-4vvf-mjgr
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and…
Priority MEDIUM 44
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name la…
TI-2023-15957 CVE-2023-32681 · GHSA-j8r2-6x86-q33q
Unintended leak of Proxy-Authorization header in requests
Priority LOW 33
Requests is a HTTP library.
TI-2023-04046 CVE-2023-4380 · GHSA-2pfv-q6j2-pcrf
Platform: token exposed at importing project
Priority LOW 29
A logic flaw exists in Ansible Automation platform.