RHSA-2026:71179

node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification.

GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references.

GitPython before 3.1.52 is vulnerable to environment-variable exfiltration in Repo.clone_from().

sqlparse is a non-validating SQL parser module for Python.

GitPython is a python library used to interact with Git repositories.

GitPython before 3.1.51 contains an incomplete command injection blocklist that fails to account for git's long-option prefix abbreviation feature.

GitPython is a python library used to interact with Git repositories.

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

GitPython before 3.1.51 fails to guard against dangerous Git options passed as keyword arguments in Repo.archive() and git.ls_remote(), allowing command injection via options such as --exec/--upload-pack (leading to arbi…

sqlparse is a non-validating SQL parser module for Python.

GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory.

GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.

lxml is a library for processing XML and HTML in the Python language.

GitPython is a python library used to interact with Git repositories.

### Summary `qs.stringify` throws a `TypeError` when it serializes an object whose own `constructor` property has a truthy, non-callable `isBuffer` member.

GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.

GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs.

GitPython before 3.1.59 contains an arbitrary file read vulnerability in TagReference.create() where a positional reference parameter bypasses the unsafe option guard.

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath.

GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD.

urllib3 is a user-friendly HTTP client library for Python.

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

A flaw was found in the Ansible Automation Platform automation-controller.

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

sqlparse is a non-validating SQL parser module for Python.

A flaw was found in the AAP Controller's HashiCorp Vault credential plugin.

containerd is an open-source container runtime.

An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.

A flaw was found in AWX.

GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.

js-yaml is a JavaScript YAML parser and dumper.

GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symbols, and whitespace i…

GitPython before 3.1.58 contains a command execution vulnerability in the check_unsafe_options guard that can be bypassed by combining a single-character kwarg with split_single_char_options=False.

Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not.

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.

When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface.

Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.

Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.

brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion.

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

fast-uri accepts a host that contains an unbalanced or misplaced authority bracket without reporting an error.

fast-uri is a URI parser for Node.js.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

fast-uri serializes the port component of a URI without validating it.

fast-uri is a URI parser for Node.js.

fast-uri is a URI parser for Node.js.

fast-uri is a URI parser for Node.js.

GitPython before 3.1.58 contains a remote code execution vulnerability in Repo.init that forwards unsafe git options without validation.

containerd is an open-source container runtime.

A flaw was found in Red Hat Ansible Automation Platform's automation- controller.

GitPython versions before 3.1.58 contain an arbitrary file overwrite vulnerability in IndexFile.from_tree, IndexFile.reset, and IndexFile.merge_tree methods that append caller-influenced treeish strings to git read-tree…

nanoid is a secure, URL-friendly, unique string ID generator for JavaScript.

A flaw was found in Ansible Automation Platform's automation-controller.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

A flaw was found in the automation-controller input-validation guard sanitize_jinja().

A flaw was found in the Ansible Automation Platform automation-controller.

A flaw was found in the automation-controller API.

A container privilege escalation flaw was found in certain Ansible Automation Platform images.

An argument-injection flaw was found in the Ansible Automation Platform automation-controller system-job subsystem.

A flaw was found in the Ansible Automation Platform automation-controller.

A flaw was found in the automation-controller instance install-bundle endpoint.

A flaw was found in Ansible Automation Platform's automation-controller (AWX).

Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead.

Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.

JobJobEventsChildrenSummary view has no model/parent_model.

URLModificationMiddleware resolves named-URL lookups against unfiltered Model.objects before RBAC.

A flaw was found in the Ansible Automation Platform automation-controller.

StringListPathField.to_internal_value() calls os.path.exists() on unbounded user-supplied paths.

/api/v2/config/ is protected only by IsAuthenticated.

RunAdHocCommand.build_args() appends limit as bare positional (args.append(limit)) instead of using args.extend(['-l', limit]) like RunJob.

LaunchConfigurationBaseSerializer.scm_branch has no validate_scm_branch() leading-dash check, unlike Project/JobTemplate/JobLaunch serializers.

Notification template Jinja AST whitelist only inspects static Getattr nodes.