Red Hat Security Advisory

RHSA-2026:36350

satellite/foreman-mcp-server-rhel9 container image available as a Technology Preview

Released 2026-07-07 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-25332 CVE-2026-32871 · GHSA-vv7q-7jx5-f767

HIGH 82

FastMCP is a Pythonic way to build MCP servers and clients.

CVSS 4.0CRITICAL 10.0 Network No auth No interaction EPSS 0.00925 Published 2026-04-02 Fixed in 3.2.0 CWE-918

TI-2025-42945 CVE-2025-69872 · GHSA-w8v5-vhqr-4h9v

HIGH 82

DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00599 Published 2026-02-11 Partial fix CWE-94

TI-2026-35886 CVE-2026-48526 · GHSA-xgmm-8j9v-c9wx

HIGH 68

PyJWT is a JSON Web Token implementation in Python.

CVSS 3.1HIGH 7.4 Network No auth No interaction EPSS 0.00427 Published 2026-05-28 Partial fix · 2.13.0 CWE-287

TI-2025-42650 CVE-2025-69196 · GHSA-5h2m-4q8j-pqpj

HIGH 66

FastMCP is the standard framework for building MCP applications.

CVSS 4.0HIGH 7.4 Network No auth User interaction EPSS 0.0038 Published 2026-03-16 Fixed in 2.14.2 CWE-863

TI-2026-32373 CVE-2026-44432 · GHSA-mf9v-mfxr-j63j

MEDIUM 40

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.9 Network No auth No interaction EPSS 0.0068 Published 2026-05-13 Partial fix · 2.7.0 CWE-409

TI-2026-32372 CVE-2026-44431 · GHSA-qccp-gfcp-xxvc

LOW 36

urllib3 is an HTTP client library for Python.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00331 Published 2026-05-13 Partial fix · 2.7.0 CWE-200