Red Hat Security Advisory

RHSA-2026:79380

satellite/iop-vulnerability-engine-rhel9 container image available as a Technology Preview

Released 2026-10-08 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Satellite 6.18 registry.redhat.io/satellite/iop-vulnerability-engine-rhel9

Fixes 2 records

TI-2026-54689 CVE-2026-78677 · GHSA-8mcc-hrx5-hvxc

GitPython before 3.1.59 Path Traversal via separate-git-dir

HIGH 77

GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00651 Published 2026-08-25 Partial fix · 3.1.59 CWE-22

TI-2026-27214 CVE-2026-34993 · GHSA-jg22-mg44-37j8

AIOHTTP Vulnerable to Deserialization of Untrusted Data

LOW 31

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00179 Published 2026-06-02 Partial fix · 3.14.0 CWE-502