Red Hat Security AdvisoryRHSA-2026:88200
Ansible automation portal Red Hat Enterprise Linux Images
Released 2026-10-22 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Ansible Automation Platform 2.2 registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9
Fixes 6 records
Priority HIGH 77
node-forge through 1.4.0 fails to validate element count in nested DigestAlgorithm sequences during RSA PKCS#1 v1.5 signature verification.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00248 · Published 2026-09-03 · Partial fix CWE-347
Priority HIGH 77
Versions of the package pacote from 11.2.7 and before 21.5.1 are vulnerable to Denial of Service (DoS) via the addGitSha function.
CVSS 4.0HIGH 8.7· Network · No auth · No interaction · EPSS 0.00346 · Published 2026-05-26 · Partial fix · 21.5.1 CWE-1333
TI-2026-64877 CVE-2026-100721 · GHSA-5h3f-q97h-ccvc · GHSA-c9wr-qm7p-p6vc Priority HIGH 76
vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver.
CVSS 4.0CRITICAL 9.5· Network · No auth · No interaction · EPSS 0.00591 · Published 2026-09-27 · Fixed in 3.12.2 CWE-863
Priority LOW 39
compression is a Node.js and Express compression middleware.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00477 · Published 2026-09-11 · Partial fix · 1.8.2 CWE-401
Priority LOW 38
isomorphic-git before 1.42.0 contains a prototype pollution vulnerability in the getRemoteInfo function that allows a malicious Git server operator to pollute Object.prototype by advertising crafted ref names containing…
CVSS 4.0HIGH 7.1· Network · No auth · User interaction · EPSS 0.00443 · Published 2026-09-10 · Fixed in 1.42.0 CWE-1321
Priority LOW 36
ssl.SSLContext.wrap_bio() didn't require the server_hostname argument to not be None if ssl.SSLContext.check_hostname was set.
CVSS 4.0HIGH 7.6· Network · No auth · User interaction · EPSS 0.00547 · Published 2026-09-30 · Partial fix · 3.10.22, 3.11.17 +4 CWE-297
THREATIST.IORead the docs