TI-2026-18923 CVE-2026-23490 · GHSA-63vm-454h-vhhq
pyasn1 has a DoS vulnerability in decoder
Priority HIGH 72
pyasn1 is a generic ASN.1 library for Python.
RHSA-2026:3959
Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Released 2026-03-06 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 for RHEL 8 automation-controller-4.6.26-1.el8ap, automation-controller-cli-4.6.26-1.el8ap, automation-controller-server-4.6.26-1.el8ap +10
- Red Hat Ansible Automation Platform 2.5 for RHEL 9 automation-controller-4.6.26-1.el9ap, automation-controller-cli-4.6.26-1.el9ap, automation-controller-server-4.6.26-1.el9ap +10
Fixes 11 records
TI-2026-19377 CVE-2026-24049 · GHSA-8rrh-rw8j-w5fx
wheel Allows Arbitrary File Permission Modification via Path Traversal
Priority MEDIUM 64
wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.
TI-2026-00748 CVE-2026-0994 · GHSA-7gcm-g887-7qv7
Denial of Service in Python Protobuf
Priority MEDIUM 43
A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the max_recursion_depth limit can be bypassed when parsing nested google.protobuf.Any messages.
TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4
Memory exhaustion in query parameter parsing in net/url
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
TI-2026-01001 CVE-2026-1285 · GHSA-4rrr-2h4v-f3j9
Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2025-13292 CVE-2025-14550 · GHSA-33mw-q7rj-mjwj
Potential denial-of-service vulnerability via repeated headers when using ASGI
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2025-42677 CVE-2025-69223 · GHSA-6mq8-rvhq-8wgg
AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
Priority MEDIUM 40
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
TI-2026-00932 CVE-2026-1207 · GHSA-mwm9-4648-f68q
Potential SQL injection via raster lookups on PostGIS
Priority LOW 39
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-17723 CVE-2026-22029 · GHSA-2w69-qvjg-hvjx
React Router vulnerable to XSS via Open Redirects
Priority LOW 38
React Router is a router for React.
TI-2026-01025 CVE-2026-1312 · GHSA-6426-9fv3-65x8
Potential SQL injection via QuerySet.order_by and FilteredRelation
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-01003 CVE-2026-1287 · GHSA-gvg8-93h5-g6qq
Potential SQL injection in column aliases via control characters
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.