Red Hat Security Advisory

RHSA-2026:3962

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2026-03-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8

TI-2025-37931 CVE-2025-61140 · GHSA-6c59-mwgh-r2x6

MEDIUM 49

The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00526 Published 2026-01-28 Partial fix · 1.2.0 CWE-1321

TI-2025-12309 CVE-2025-13465 · GHSA-xxjr-mmjv-4gpg

MEDIUM 40

The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.01823 Published 2026-01-21 Partial fix · 4.17.23, 4.18.0 CWE-1321

TI-2026-00932 CVE-2026-1207 · GHSA-mwm9-4648-f68q

LOW 39

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.12819 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-89

TI-2026-01025 CVE-2026-1312 · GHSA-6426-9fv3-65x8

LOW 26

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00897 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-89

TI-2026-01003 CVE-2026-1287 · GHSA-gvg8-93h5-g6qq

LOW 26

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00843 Published 2026-02-03 Partial fix · 6.0.2, 5.2.11 +1 CWE-89