Red Hat Security Advisory

RHSA-2026:1504

satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview

Released 2026-01-28 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx

MEDIUM 64

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.0035 Published 2026-01-22 Partial fix · 0.46.2 CWE-22

TI-2026-17326 CVE-2026-21441 · GHSA-38jv-5279-wg99

MEDIUM 50

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.02922 Published 2026-01-07 Partial fix · 2.6.3 CWE-409

TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53

MEDIUM 46

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-770

TI-2026-19738 CVE-2026-24486 · GHSA-wp53-j4wj-2cfg

MEDIUM 42

Python-Multipart is a streaming multipart parser for Python.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.02206 Published 2026-01-27 Partial fix · 0.0.22 CWE-22

TI-2025-40898 CVE-2025-66471 · GHSA-2xpw-w6gg-jr37

MEDIUM 40

urllib3 is a user-friendly HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.00731 Published 2025-12-05 Partial fix · 2.6.0 CWE-409