TI-2024-30367 CVE-2024-45296 · GHSA-9wv6-86v2-598j
path-to-regexp outputs backtracking regular expressions
Priority MEDIUM 41
path-to-regexp turns path strings into a regular expressions.
RHSA-2024:10762
Red Hat Ansible Automation Platform 2.4 Product Security and Bug Fix Update
Released 2024-12-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.4 for RHEL 8 ansible-core-1:2.15.13-1.el8ap, automation-controller-venv-tower-4.5.13-1.el8ap
- Red Hat Ansible Automation Platform 2.4 for RHEL 9 ansible-core-1:2.15.13-1.el9ap, automation-controller-venv-tower-4.5.13-1.el9ap
Fixes 4 records
TI-2024-30768 CVE-2024-45801 · GHSA-mmhx-hmjr-r674
Tampering by prototype polution in DOMPurify
Priority LOW 34
DOMPurify is a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG.
TI-2024-09186 CVE-2024-9902 · GHSA-32p4-gm2c-wmch
Ansible-core: ansible-core user may read/write unauthorized content
Priority LOW 30
A flaw was found in Ansible.
TI-2024-08141 CVE-2024-8775 · GHSA-jpxc-vmjf-9fcj
Ansible-core: exposure of sensitive information in ansible vault files due to improper logging
Priority LOW 24
A flaw was found in Ansible, where sensitive information stored in Ansible Vault files can be exposed in plaintext during the execution of a playbook.