TI-2026-01620 CVE-2026-1961 · GHSA-fh2w-2c26-vpg5
Forman: foreman: remote code execution via command injection in websocket proxy
Priority HIGH 73
A flaw was found in Foreman.
RHSA-2026:5970
Satellite 6.17.7 Async Update
Released 2026-03-26 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Satellite 6.17 for RHEL 9 foreman-3.14.0.14-1.el9sat, foreman-cli-3.14.0.14-1.el9sat, foreman-debug-3.14.0.14-1.el9sat +33
Fixes 12 records
TI-2025-05586 CVE-2025-6176 · GHSA-2qfp-q593-8484
Brotli decompression bomb DoS in scrapy/scrapy
Priority HIGH 72
Scrapy versions up to 2.13.2 are vulnerable to a denial of service (DoS) attack due to a flaw in its brotli decompression implementation.
TI-2025-41709 CVE-2025-68121 · GHSA-h355-32pf-p2xm
Unexpected session resumption in crypto/tls
Priority MEDIUM 51
During session resumption in crypto/tls, if the underlying Config has its ClientCAs or RootCAs fields mutated between the initial handshake and the resumed handshake, the resumed handshake may succeed when it should have…
TI-2026-00742 CVE-2026-0980 · GHSA-hfcp-477w-3wjw
Rubyipmi: red hat satellite: remote code execution in rubyipmi via malicious bmc username
Priority MEDIUM 42
A flaw was found in rubyipmi, a gem used in the Baseboard Management Controller (BMC) component of Red Hat Satellite.
TI-2026-01001 CVE-2026-1285 · GHSA-4rrr-2h4v-f3j9
Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2025-13292 CVE-2025-14550 · GHSA-33mw-q7rj-mjwj
Potential denial-of-service vulnerability via repeated headers when using ASGI
Priority MEDIUM 41
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-00932 CVE-2026-1207 · GHSA-mwm9-4648-f68q
Potential SQL injection via raster lookups on PostGIS
Priority LOW 39
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-01221 CVE-2026-1531 · GHSA-2qxw-7fmx-gqfm
Foreman-kubevirt: foreman_kubevirt: man-in-the-middle due to insecure default ssl verification
Priority LOW 37
A flaw was found in foreman_kubevirt.
TI-2026-01220 CVE-2026-1530 · GHSA-m3hq-3qj8-c5fm
Fog-kubevirt: fog-kubevirt: man-in-the-middle vulnerability due to disabled certificate validation
Priority LOW 37
A flaw was found in fog-kubevirt.
TI-2026-01025 CVE-2026-1312 · GHSA-6426-9fv3-65x8
Potential SQL injection via QuerySet.order_by and FilteredRelation
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-01003 CVE-2026-1287 · GHSA-gvg8-93h5-g6qq
Potential SQL injection in column aliases via control characters
Priority LOW 26
An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
TI-2026-03763 CVE-2026-4324 · GHSA-fwj4-6wgp-mpxm
Rubygem-katello: katello: denial of service and potential information disclosure via sql injection
Priority LOW 24
A flaw was found in the Katello plugin for Red Hat Satellite.