TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
RHSA-2025:19221
Red Hat Ansible Automation Platform 2.6 Container Release Update
Released 2025-10-28 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.6 registry.redhat.io/ansible-automation-platform-26/eda-controller-rhel9, registry.redhat.io/ansible-automation-platform-26/gateway-rhel9, registry.redhat.io/ansible-automation-platform-26/lightspeed-rhel9
Fixes 5 records
TI-2025-36904 CVE-2025-59343 · GHSA-vj76-c3g6-qr5v
tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball
Priority LOW 38
tar-fs provides filesystem bindings for tar-stream.
TI-2025-37145 CVE-2025-59682 · GHSA-q95w-c7qg-hrff
Path traversal in djangoproject Django
Priority LOW 31
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7.
TI-2025-09093 CVE-2025-9908 · GHSA-c2g3-cfch-p5h4
Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams
Priority LOW 31
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.
TI-2025-09092 CVE-2025-9907 · GHSA-3mcc-r9wq-f9g6
Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda
Priority LOW 31
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.