TI-2026-18923 CVE-2026-23490 · GHSA-63vm-454h-vhhq
pyasn1 has a DoS vulnerability in decoder
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
RHSA-2026:3958
Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
Released 2026-03-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.6 for RHEL 10 receptor-1.6.3-4.el10ap, receptorctl-1.6.3-4.el10ap
- Red Hat Ansible Automation Platform 2.6 for RHEL 9 automation-controller-4.7.9-1.el9ap, automation-controller-cli-4.7.9-1.el9ap, automation-controller-server-4.7.9-1.el9ap +8
Fixes 14 records
TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx
wheel Allows Arbitrary File Permission Modification via Path Traversal
Priority MEDIUM 64
wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.
TI-2026-00748 CVE-2026-0994 · GHSA-7gcm-g887-7qv7
Denial of Service in Python Protobuf
Priority MEDIUM 43
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4
Memory exhaustion in query parameter parsing in net/url
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
TI-2026-01001 CVE-2026-1285 · GHSA-4rrr-2h4v-f3j9
Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2025-13292 CVE-2025-14550 · GHSA-33mw-q7rj-mjwj
Potential denial-of-service vulnerability via repeated headers when using ASGI
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2025-42677 CVE-2025-69223 · GHSA-6mq8-rvhq-8wgg
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Priority MEDIUM 40
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg
Prototype Pollution Vulnerability in Lodash _.unset and _.omit functions
Priority MEDIUM 40
The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.
TI-2026-00932 CVE-2026-1207 · GHSA-mwm9-4648-f68q
Potential SQL injection via raster lookups on PostGIS
Priority LOW 39
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-17723 CVE-2026-22029 · GHSA-2w69-qvjg-hvjx
React Router vulnerable to XSS via Open Redirects
Priority LOW 38
React Router is a router for React.
TI-2026-17585 CVE-2026-21884 · GHSA-8v8x-cx79-35w7
React Router SSR XSS in ScrollRestoration
Priority LOW 38
React Router is a router for React.
TI-2025-36699 CVE-2025-59057 · GHSA-3cgp-3xvw-98x8
React Router has XSS Vulnerability
Priority LOW 34
React Router is a router for React.
TI-2026-01025 CVE-2026-1312 · GHSA-6426-9fv3-65x8
Potential SQL injection via QuerySet.order_by and FilteredRelation
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-01003 CVE-2026-1287 · GHSA-gvg8-93h5-g6qq
Potential SQL injection in column aliases via control characters
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.