Red Hat Security Advisory

RHSA-2026:50357

Red Hat Ansible Automation Platform 2.5 Container Release Update

Released 2026-08-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8, registry.redhat.io/ansible-automation-platform-25/ee-supported-rhel8, registry.redhat.io/ansible-automation-platform-25/hub-rhel8 +1

TI-2026-42746 CVE-2026-59939 · GHSA-j5g9-f88f-gfj3

HIGH 72

httplib2 is a comprehensive HTTP client library for Python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00665 Published 2026-07-08 Partial fix · 0.32.0 CWE-409

TI-2026-42684 CVE-2026-59869 · GHSA-52cp-r559-cp3m

HIGH 72

js-yaml is a JavaScript YAML parser and dumper.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00585 Published 2026-07-08 Partial fix · 3.15.0, 4.3.0 CWE-407

TI-2026-39957 CVE-2026-55379 · GHSA-45hq-cxwh-f6vc

HIGH 72

Pillow is a Python imaging library.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00522 Published 2026-07-06 Partial fix · 12.3.0 CWE-789

TI-2026-11166 CVE-2026-13149 · GHSA-3jxr-9vmj-r5cp

MEDIUM 40

brace-expansion through 5.0.6 is vulnerable to denial of service.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00364 Published 2026-06-30 Partial fix · 5.0.7, 1.1.16 +1 CWE-400

TI-2026-32457 CVE-2026-44545 · GHSA-rrc9-mx66-ffcm

LOW 39

daphne before 4.2.2 did not pass maxFramePayloadSize or maxMessagePayloadSize to Autobahn's WebSocketServerFactory.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00328 Published 2026-06-03 Fixed in 4.2.2 CWE-770

TI-2026-09781 CVE-2026-11332 · GHSA-w8p5-mx5w-cpqj

LOW 35

A flaw was found in ansible-core.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00222 Published 2026-06-05 Partial fix · 1:2.16.19-1.el8ap, 1:2.16.19-1.el9ap +33 CWE-88

TI-2026-27214 CVE-2026-34993 · GHSA-jg22-mg44-37j8

LOW 31

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00179 Published 2026-06-02 Partial fix · 3.14.0 CWE-502

TI-2026-08430 CVE-2026-9595 · GHSA-mx8g-39q3-5c79

LOW 29

Impact: When a user-configured proxy on webpack-dev-server has a broad context (e.g.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00163 Published 2026-06-15 Partial fix · 5.2.5 CWE-346