TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj
Axios is vulnerable to DoS attack through lack of data size check
Priority HIGH 72
Axios is a promise based HTTP client for the browser and Node.js.
RHSA-2025:23069
Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Released 2025-12-10 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 ansible-automation-platform-installer-2.5-20.el8ap, ansible-builder-3.1.1-1.el8ap, ansible-creator-25.12.0-1.el8ap +47
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 ansible-automation-platform-installer-2.5-20.el9ap, ansible-builder-3.1.1-1.el9ap, ansible-creator-25.12.0-1.el9ap +47
Fixes 6 records
TI-2025-39861 CVE-2025-64459 · GHSA-frmv-pr5f-9mcr
Potential SQL injection via _connector keyword argument in QuerySet and Q objects
Priority HIGH 65
An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
TI-2025-37061 CVE-2025-59530 · GHSA-47m2-4cr7-mhcw
quic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame
Priority LOW 39
quic-go is an implementation of the QUIC protocol in Go.
TI-2025-09094 CVE-2025-9909 · GHSA-2fx4-vwf2-pw99
Aap-gateway: improper path validation in gateway allows credential exfiltration
Priority LOW 31
A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component.
TI-2025-09093 CVE-2025-9908 · GHSA-c2g3-cfch-p5h4
Event-driven-ansible: sensitive internal headers disclosure in aap eda event streams
Priority LOW 31
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams.
TI-2025-09092 CVE-2025-9907 · GHSA-3mcc-r9wq-f9g6
Event-driven-ansible: event stream test mode exposes sensitive headers in aap eda
Priority LOW 31
A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API.