Read the docs
Red Hat Security Advisory

RHSA-2025:18984

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2025-10-22 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 4 records

TI-2025-06353 CVE-2025-6985 · GHSA-m42m-m8cr-8m58

XXE Vulnerability in langchain-ai/langchain

Priority HIGH 72

The HTMLSectionSplitter class in langchain-text-splitters version 0.3.8 is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.00508 Published 2025-10-06 Partial fix · 0.3.9 CWE-611
TI-2025-06980 CVE-2025-7647 · GHSA-cr7q-2w66-hjcm

Insecure Temporary File Handling in run-llama/llama_index

Priority HIGH 65

The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper sec…

CVSS 3.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00149 Published 2025-09-27 Partial fix · v0.13.0, 0.13.0 CWE-378
TI-2025-37144 CVE-2025-59681 · GHSA-hpr9-3m2g-3j9p

SQL injection in djangoproject Django

Priority MEDIUM 43

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2025-10-01 Partial fix · 4.2.25, 5.1.13 +1 CWE-89
TI-2025-37145 CVE-2025-59682 · GHSA-q95w-c7qg-hrff

Path traversal in djangoproject Django

Priority LOW 31

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00932 Published 2025-10-01 Partial fix · 4.2.25, 5.1.13 +1 CWE-23