Red Hat Security Advisory

RHSA-2026:24766

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2026-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8

TI-2026-26395 CVE-2026-34070 · GHSA-qh6h-p6c9-ff54

HIGH 72

LangChain is a framework for building agents and LLM-powered applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01436 Published 2026-03-31 Partial fix · 1.2.22 CWE-22

TI-2025-38908 CVE-2025-62718 · GHSA-3p68-rc4w-qgx5

HIGH 67

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.01207 Published 2026-04-09 Partial fix · 1.15.0, 0.31.0 CWE-441

TI-2026-05545 CVE-2026-6321 · GHSA-q3j6-qgpj-74h6

MEDIUM 40

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00634 Published 2026-05-04 Partial fix · 3.1.1, 2.4.1 CWE-22

TI-2026-29551 CVE-2026-40895

LOW 31

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00486 Published 2026-04-21 Partial fix · 1.16.0 CWE-200