Red Hat Security Advisory

RHSA-2025:16514

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2025-09-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-automation-platform-25/lightspeed-chatbot-rhel8, ansible-automation-platform-25/lightspeed-rhel8

Fixes 3 records

TI-2025-35707 CVE-2025-57833 · GHSA-6w2r-r2m5-xq5w

SQL injection in djangoproject Django

HIGH 70

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.28271 Published 2025-09-03 Partial fix · 4.2.24, 5.1.12 +1 CWE-89

TI-2025-04762 CVE-2025-5302 · GHSA-7753-xrfw-ch36

Denial of Service (DOS) in JSONReader in run-llama/llama_index

HIGH 70

A denial of service vulnerability exists in the JSONReader component of the run-llama/llama_index repository, specifically in version v0.12.37.

CVSS 3.0HIGH 8.6 Network No auth No interaction EPSS 0.00285 Published 2025-08-25 Fixed in 0.12.38 CWE-674

TI-2025-06352 CVE-2025-6984 · GHSA-pc6w-59fv-rh23

Sensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain

HIGH 66

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity (XXE) attacks due to insecure XML parsing.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01647 Published 2025-09-04 Partial fix · 0.3.27 CWE-200