Red Hat Security AdvisoryRHSA-2026:59159
Red Hat Ansible Automation Platform 2.5 Container Release Update
Released 2026-08-24 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.5 registry.redhat.io/ansible-automation-platform-25/controller-rhel8, registry.redhat.io/ansible-automation-platform-25/hub-rhel8, registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8
Fixes 8 records
Priority HIGH 73
GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.02209 · Published 2026-08-01 · Partial fix · 3.1.51 CWE-78
Priority HIGH 72
The brace-expansion library generates arbitrary strings containing a common prefix and suffix.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00647 · Published 2026-08-03 · Partial fix · 1.1.18, 2.1.4 +2 CWE-400
Priority HIGH 72
LangChain is a framework for building agents and LLM-powered applications.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01436 · Published 2026-03-31 · Partial fix · 1.2.22 CWE-22
Priority MEDIUM 42
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.
CVSS 4.0HIGH 8.7· Network · Low privileges · No interaction · EPSS 0.01134 · Published 2026-08-04 · Partial fix · 6.0.8, 5.2.17 CWE-73
Priority MEDIUM 40
brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00643 · Published 2026-07-23 · Partial fix · 5.0.8, 3.0.3 +2 CWE-400
Priority MEDIUM 40
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00583 · Published 2026-01-05 · Partial fix · 3.13.3 CWE-409
Priority LOW 39
pyasn1 is a generic ASN.1 library for Python.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0044 · Published 2026-07-14 · Partial fix · 0.6.4 CWE-400
Priority LOW 32
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00528 · Published 2026-08-03 · Partial fix · 3.14.3 CWE-125
THREATIST.IORead the docs