{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "summary", "text": "An update is now available for Red Hat Ansible Automation Platform 2.6\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.", "title": "Topic" }, { "category": "general", "text": "Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language.\n\nSecurity Fix(es):\n\n* automation-platform-ui: Axios: Denial of Service due to unenforced request and response size limits (CVE-2026-44488)\n* automation-platform-ui: Axios: Information disclosure due to prototype pollution vulnerability (CVE-2026-44495)\n* automation-platform-ui: fast-uri: URI authority bypass due to improper delimiter handling (CVE-2026-6322)\n* automation-platform-ui: Axios: Arbitrary HTTP header injection via prototype pollution (CVE-2026-42035)\n* automation-platform-ui: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization (CVE-2026-41240)\n* automation-platform-ui: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors (CVE-2026-44293)\n* python3.12-pyjwt: Authentication bypass due to forged JSON Web Tokens (CVE-2026-48526)\n* automation-controller: Dynaconf: Arbitrary code execution via Server-Side Template Injection (CVE-2026-33154)\n* python3.12-urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers (CVE-2026-44431)\n* python3.12-urllib3: Denial of Service due to excessive HTTP response decompression (CVE-2026-44432)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "title": "Details" }, { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "https://access.redhat.com/errata/RHSA-2026:34160", "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "external", "summary": "https://access.redhat.com/security/updates/classification/#important", "url": "https://access.redhat.com/security/updates/classification/#important" }, { "category": "external", "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates", "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/whats_new-async_updates" }, { "category": "external", "summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade", "url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6#Upgrade" }, { "category": "external", "summary": "2449774", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449774" }, { "category": "external", "summary": "2461147", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461147" }, { "category": "external", "summary": "2461606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606" }, { "category": "external", "summary": "2466684", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684" }, { "category": "external", "summary": "2477104", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477104" }, { "category": "external", "summary": "2477154", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154" }, { "category": "external", "summary": "2477167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167" }, { "category": "external", "summary": "2482734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734" }, { "category": "external", "summary": "2487937", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937" }, { "category": "external", "summary": "2487949", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34160.json" } ], "title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update", "tracking": { "current_release_date": "2026-08-10T10:07:41+00:00", "generator": { "date": "2026-08-10T10:07:41+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.12" } }, "id": "RHSA-2026:34160", "initial_release_date": "2026-07-01T11:09:18+00:00", "revision_history": [ { "date": "2026-07-01T11:09:18+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-07-01T11:09:18+00:00", "number": "2", "summary": "Last updated version" }, { "date": "2026-08-10T10:07:41+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform:2.6::el9" } } }, { "category": "product_name", "name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product": { "name": "Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3", "product_identification_helper": { "cpe": "cpe:/a:redhat:ansible_automation_platform_developer:2.6::el9" } } } ], "category": "product_family", "name": "Red Hat Ansible Automation Platform" }, { "branches": [ { "category": "product_version", "name": "automation-gateway-0:2.6.20260701-1.el9ap.src", "product": { "name": "automation-gateway-0:2.6.20260701-1.el9ap.src", "product_id": "automation-gateway-0:2.6.20260701-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-gateway@2.6.20260701-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "automation-hub-0:4.11.10-1.el9ap.src", "product": { "name": "automation-hub-0:4.11.10-1.el9ap.src", "product_id": "automation-hub-0:4.11.10-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-hub@4.11.10-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "product": { "name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "product_id": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.10-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "automation-platform-ui-0:2.6.10-1.el9ap.src", "product": { "name": "automation-platform-ui-0:2.6.10-1.el9ap.src", "product_id": "automation-platform-ui-0:2.6.10-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-platform-ui@2.6.10-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src", "product": { "name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src", "product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src", "product": { "name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src", "product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src", "product": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src", "product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.12-urllib3-0:2.7.0-1.el9ap.src", "product": { "name": "python3.12-urllib3-0:2.7.0-1.el9ap.src", "product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=src" } } }, { "category": "product_version", "name": "automation-eda-controller-0:1.2.9-3.el9ap.src", "product": { "name": "automation-eda-controller-0:1.2.9-3.el9ap.src", "product_id": "automation-eda-controller-0:1.2.9-3.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller@1.2.9-3.el9ap?arch=src" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "product": { "name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "product_id": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260701-2.el9ap?arch=src" } } }, { "category": "product_version", "name": "automation-controller-0:4.7.13-2.el9ap.src", "product": { "name": "automation-controller-0:4.7.13-2.el9ap.src", "product_id": "automation-controller-0:4.7.13-2.el9ap.src", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=src" } } } ], "category": "architecture", "name": "src" }, { "branches": [ { "category": "product_version", "name": "automation-gateway-0:2.6.20260701-1.el9ap.noarch", "product": { "name": "automation-gateway-0:2.6.20260701-1.el9ap.noarch", "product_id": "automation-gateway-0:2.6.20260701-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-gateway@2.6.20260701-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "product": { "name": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "product_id": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-gateway-config@2.6.20260701-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "product": { "name": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "product_id": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-gateway-server@2.6.20260701-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-hub-0:4.11.10-1.el9ap.noarch", "product": { "name": "automation-hub-0:4.11.10-1.el9ap.noarch", "product_id": "automation-hub-0:4.11.10-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-hub@4.11.10-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "product": { "name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "product_id": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-galaxy-ng@4.11.10-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-platform-ui-0:2.6.10-1.el9ap.noarch", "product": { "name": "automation-platform-ui-0:2.6.10-1.el9ap.noarch", "product_id": "automation-platform-ui-0:2.6.10-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-platform-ui@2.6.10-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "product": { "name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "product_id": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pulp-container@2.19.12-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "product": { "name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "product_id": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pyjwt%2Bcrypto@2.13.0-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "product": { "name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "product_id": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pyjwt@2.13.0-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "product": { "name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "product_id": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-urllib3@2.7.0-1.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-0:1.2.9-3.el9ap.noarch", "product": { "name": "automation-eda-controller-0:1.2.9-3.el9ap.noarch", "product_id": "automation-eda-controller-0:1.2.9-3.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller@1.2.9-3.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "product": { "name": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "product_id": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-base@1.2.9-3.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "product": { "name": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "product_id": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-base-services@1.2.9-3.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "product": { "name": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "product_id": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-event-stream-services@1.2.9-3.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "product": { "name": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "product_id": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-eda-controller-worker-services@1.2.9-3.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bactivitystream@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bapi_documentation@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bauthentication@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bchannel_auth@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bfeature_flags@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bjwt_consumer@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Boauth2_provider@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brbac@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bredis_client@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Bresource_registry@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base%2Brest_filters@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "product": { "name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "product_id": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-django-ansible-base@2.6.20260701-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch", "product": { "name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch", "product_id": "automation-controller-cli-0:4.7.13-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-cli@4.7.13-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-server-0:4.7.13-2.el9ap.noarch", "product": { "name": "automation-controller-server-0:4.7.13-2.el9ap.noarch", "product_id": "automation-controller-server-0:4.7.13-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-server@4.7.13-2.el9ap?arch=noarch" } } }, { "category": "product_version", "name": "automation-controller-ui-0:4.7.13-2.el9ap.noarch", "product": { "name": "automation-controller-ui-0:4.7.13-2.el9ap.noarch", "product_id": "automation-controller-ui-0:4.7.13-2.el9ap.noarch", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-ui@4.7.13-2.el9ap?arch=noarch" } } } ], "category": "architecture", "name": "noarch" }, { "branches": [ { "category": "product_version", "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "product": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "product": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "product": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-0:4.7.13-2.el9ap.x86_64", "product": { "name": "automation-controller-0:4.7.13-2.el9ap.x86_64", "product_id": "automation-controller-0:4.7.13-2.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=x86_64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "product": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=x86_64" } } } ], "category": "architecture", "name": "x86_64" }, { "branches": [ { "category": "product_version", "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "product": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "product": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "product": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-0:4.7.13-2.el9ap.ppc64le", "product": { "name": "automation-controller-0:4.7.13-2.el9ap.ppc64le", "product_id": "automation-controller-0:4.7.13-2.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=ppc64le" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "product": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=ppc64le" } } } ], "category": "architecture", "name": "ppc64le" }, { "branches": [ { "category": "product_version", "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "product": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "product": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "product": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-0:4.7.13-2.el9ap.s390x", "product": { "name": "automation-controller-0:4.7.13-2.el9ap.s390x", "product_id": "automation-controller-0:4.7.13-2.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=s390x" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "product": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=s390x" } } } ], "category": "architecture", "name": "s390x" }, { "branches": [ { "category": "product_version", "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "product": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "product_id": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia@0.1.34-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "product": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "product_id": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debugsource@0.1.34-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "product": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "product_id": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/python3.12-pysequoia-debuginfo@0.1.34-1.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-0:4.7.13-2.el9ap.aarch64", "product": { "name": "automation-controller-0:4.7.13-2.el9ap.aarch64", "product_id": "automation-controller-0:4.7.13-2.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller@4.7.13-2.el9ap?arch=aarch64" } } }, { "category": "product_version", "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "product": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "product_id": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "product_identification_helper": { "purl": "pkg:rpm/redhat/automation-controller-venv-tower@4.7.13-2.el9ap?arch=aarch64" } } } ], "category": "architecture", "name": "aarch64" } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.7.13-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src" }, "product_reference": "automation-controller-0:4.7.13-2.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch" }, "product_reference": "automation-controller-cli-0:4.7.13-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch" }, "product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src" }, "product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6-Developer-1.3" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.7.13-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64" }, "product_reference": "automation-controller-0:4.7.13-2.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.7.13-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le" }, "product_reference": "automation-controller-0:4.7.13-2.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.7.13-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x" }, "product_reference": "automation-controller-0:4.7.13-2.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.7.13-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src" }, "product_reference": "automation-controller-0:4.7.13-2.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-0:4.7.13-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64" }, "product_reference": "automation-controller-0:4.7.13-2.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-cli-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch" }, "product_reference": "automation-controller-cli-0:4.7.13-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-server-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch" }, "product_reference": "automation-controller-server-0:4.7.13-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-ui-0:4.7.13-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch" }, "product_reference": "automation-controller-ui-0:4.7.13-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64" }, "product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le" }, "product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x" }, "product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64" }, "product_reference": "automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch" }, "product_reference": "automation-eda-controller-0:1.2.9-3.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-0:1.2.9-3.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src" }, "product_reference": "automation-eda-controller-0:1.2.9-3.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch" }, "product_reference": "automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch" }, "product_reference": "automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch" }, "product_reference": "automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch" }, "product_reference": "automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-gateway-0:2.6.20260701-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch" }, "product_reference": "automation-gateway-0:2.6.20260701-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-gateway-0:2.6.20260701-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src" }, "product_reference": "automation-gateway-0:2.6.20260701-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch" }, "product_reference": "automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch" }, "product_reference": "automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-hub-0:4.11.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch" }, "product_reference": "automation-hub-0:4.11.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-hub-0:4.11.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src" }, "product_reference": "automation-hub-0:4.11.10-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-platform-ui-0:2.6.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch" }, "product_reference": "automation-platform-ui-0:2.6.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "automation-platform-ui-0:2.6.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" }, "product_reference": "automation-platform-ui-0:2.6.10-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch" }, "product_reference": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src" }, "product_reference": "python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch" }, "product_reference": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src" }, "product_reference": "python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch" }, "product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pulp-container-0:2.19.12-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src" }, "product_reference": "python3.12-pulp-container-0:2.19.12-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch" }, "product_reference": "python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch" }, "product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pyjwt-0:2.13.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src" }, "product_reference": "python3.12-pyjwt-0:2.13.0-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64" }, "product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le" }, "product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x" }, "product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src" }, "product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64" }, "product_reference": "python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64" }, "product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le" }, "product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x" }, "product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64" }, "product_reference": "python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64" }, "product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le" }, "product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x" }, "product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64 as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64" }, "product_reference": "python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch" }, "product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" }, { "category": "default_component_of", "full_product_name": { "name": "python3.12-urllib3-0:2.7.0-1.el9ap.src as a component of Red Hat Ansible Automation Platform 2.6 for RHEL 9", "product_id": "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" }, "product_reference": "python3.12-urllib3-0:2.7.0-1.el9ap.src", "relates_to_product_reference": "9Base-Ansible-Automation-Platform-2.6" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-6322", "cwe": { "id": "CWE-140", "name": "Improper Neutralization of Delimiters" }, "discovery_date": "2026-05-05T11:01:00.332189+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2466684" } ], "notes": [ { "category": "description", "text": "A flaw was found in fast-uri. A remote attacker could exploit this vulnerability by crafting a malicious Uniform Resource Identifier (URI) that contains percent-encoded authority delimiters. The fast-uri library incorrectly decodes these delimiters during normalization and then re-emits them as raw separators, which can change the URI's intended authority. This issue allows applications that perform host allowlist checks, redirect validation, or outbound request routing to be steered to a different authority than specified, potentially bypassing security controls.", "title": "Vulnerability description" }, { "category": "summary", "text": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling", "title": "Vulnerability summary" }, { "category": "other", "text": "This Important flaw in the `fast-uri` library allows an attacker to bypass security controls in Red Hat products that process Uniform Resource Identifiers (URIs). By crafting a malicious URI with percent-encoded authority delimiters, an attacker can cause the library to incorrectly interpret the URI's authority, potentially redirecting applications to an unintended domain. This could lead to a bypass of host allowlist checks, redirect validation, or outbound request routing.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-6322" }, { "category": "external", "summary": "RHBZ#2466684", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2466684" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6322", "url": "https://www.cve.org/CVERecord?id=CVE-2026-6322" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6322" }, { "category": "external", "summary": "https://cna.openjsf.org/security-advisories.html", "url": "https://cna.openjsf.org/security-advisories.html" }, { "category": "external", "summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc", "url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-v39h-62p7-jpjc" } ], "release_date": "2026-05-05T10:29:16.378000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "fast-uri: fast-uri: URI authority bypass due to improper delimiter handling" }, { "cve": "CVE-2026-33154", "cwe": { "id": "CWE-917", "name": "Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')" }, "discovery_date": "2026-03-20T21:01:35.498935+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2449774" } ], "notes": [ { "category": "description", "text": "A flaw was found in dynaconf, a Python configuration management tool. This Server-Side Template Injection (SSTI) vulnerability occurs due to unsafe template evaluation in the @Jinja resolver when the jinja2 package is installed. A remote attacker could exploit this by embedding malicious template expressions in configuration values, which are then processed without a sandboxed environment. This could lead to arbitrary code execution on the affected system.", "title": "Vulnerability description" }, { "category": "summary", "text": "dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-33154" }, { "category": "external", "summary": "RHBZ#2449774", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449774" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-33154", "url": "https://www.cve.org/CVERecord?id=CVE-2026-33154" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33154", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33154" }, { "category": "external", "summary": "https://github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7", "url": "https://github.com/dynaconf/dynaconf/commit/2fbb45ee36b8c0caa5b924fe19f3c1a5e8603fa7" }, { "category": "external", "summary": "https://github.com/dynaconf/dynaconf/releases/tag/3.2.13", "url": "https://github.com/dynaconf/dynaconf/releases/tag/3.2.13" }, { "category": "external", "summary": "https://github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p", "url": "https://github.com/dynaconf/dynaconf/security/advisories/GHSA-pxrr-hq57-q35p" } ], "release_date": "2026-03-20T20:22:59.090000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "dynaconf: jinja2: Dynaconf: Arbitrary code execution via Server-Side Template Injection" }, { "cve": "CVE-2026-41240", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "discovery_date": "2026-04-23T16:04:41.751666+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2461147" } ], "notes": [ { "category": "description", "text": "A flaw was found in DOMPurify, a DOM-only cross-site scripting sanitizer. A remote attacker could exploit an inconsistency in how forbidden tags and attributes are handled when function-based tag additions are used. This allows malicious HTML, MathML, or SVG elements to bypass sanitization and execute arbitrary code in the user's browser, leading to Cross-Site Scripting (XSS).", "title": "Vulnerability description" }, { "category": "summary", "text": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-41240" }, { "category": "external", "summary": "RHBZ#2461147", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461147" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-41240", "url": "https://www.cve.org/CVERecord?id=CVE-2026-41240" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41240", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41240" }, { "category": "external", "summary": "https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80", "url": "https://github.com/cure53/DOMPurify/commit/c361baa18dbdcb3344a41110f4c48ad85bf48f80" }, { "category": "external", "summary": "https://github.com/cure53/DOMPurify/releases/tag/3.4.0", "url": "https://github.com/cure53/DOMPurify/releases/tag/3.4.0" }, { "category": "external", "summary": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m", "url": "https://github.com/cure53/DOMPurify/security/advisories/GHSA-h7mw-gpvr-xq4m" } ], "release_date": "2026-04-23T14:54:32.426000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "DOMPurify: DOMPurify: Cross-Site Scripting (XSS) via inconsistent tag sanitization" }, { "cve": "CVE-2026-42035", "cwe": { "id": "CWE-915", "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes" }, "discovery_date": "2026-04-24T18:01:17.109481+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2461606" } ], "notes": [ { "category": "description", "text": "A flaw was found in Axios, a software library for making network requests. A remote attacker can exploit a prototype pollution vulnerability to inject arbitrary HTTP headers into outgoing requests. This occurs when the application's core object definitions are manipulated, causing Axios to misinterpret data and include attacker-controlled headers in network communications. This could lead to unauthorized actions or data manipulation.", "title": "Vulnerability description" }, { "category": "summary", "text": "axios: Axios: Arbitrary HTTP header injection via prototype pollution", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-42035" }, { "category": "external", "summary": "RHBZ#2461606", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2461606" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42035", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42035" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42035" }, { "category": "external", "summary": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9", "url": "https://github.com/axios/axios/security/advisories/GHSA-6chq-wfr3-2hj9" } ], "release_date": "2026-04-24T17:38:07.752000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "axios: Axios: Arbitrary HTTP header injection via prototype pollution" }, { "cve": "CVE-2026-44293", "cwe": { "id": "CWE-94", "name": "Improper Control of Generation of Code ('Code Injection')" }, "discovery_date": "2026-05-13T16:03:50.961609+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2477104" } ], "notes": [ { "category": "description", "text": "A flaw was found in protobufjs, a library used to compile protobuf definitions into JavaScript functions. A remote attacker could exploit this vulnerability by providing a crafted descriptor that includes a non-string default value for a bytes field. This could lead to the generation of an unsafe expression within the toObject conversion function, ultimately allowing the attacker to execute arbitrary code.", "title": "Vulnerability description" }, { "category": "summary", "text": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors", "title": "Vulnerability summary" }, { "category": "other", "text": "This is an Important flaw affecting Red Hat products that incorporate the protobufjs library. protobufjs is vulnerable to arbitrary code execution when compiling protobuf definitions into JavaScript. During generation of the toObject conversion function, a schema-controlled default value on a bytes field that is not a string can be emitted as unsafe JavaScript code. An attacker who can supply or influence the protobuf descriptor processed by the application (low privileges required) may achieve code execution in the Node.js process context. Fixed upstream in protobufjs 7.5.6 and 8.0.2. Affects Red Hat offerings that bundle protobufjs and process attacker-influenced protobuf schemas at runtime.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-44293" }, { "category": "external", "summary": "RHBZ#2477104", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477104" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44293", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44293" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44293", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44293" }, { "category": "external", "summary": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm", "url": "https://github.com/protobufjs/protobuf.js/security/advisories/GHSA-66ff-xgx4-vchm" } ], "release_date": "2026-05-13T14:43:33.342000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:L/A:H", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors" }, { "cve": "CVE-2026-44431", "cwe": { "id": "CWE-201", "name": "Insertion of Sensitive Information Into Sent Data" }, "discovery_date": "2026-05-13T17:01:41.663622+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2477167" } ], "notes": [ { "category": "description", "text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.", "title": "Vulnerability description" }, { "category": "summary", "text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-44431" }, { "category": "external", "summary": "RHBZ#2477167", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431" }, { "category": "external", "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc", "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc" } ], "release_date": "2026-05-13T15:20:24.588000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.9, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Moderate" } ], "title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers" }, { "cve": "CVE-2026-44432", "cwe": { "id": "CWE-409", "name": "Improper Handling of Highly Compressed Data (Data Amplification)" }, "discovery_date": "2026-05-13T17:01:01.083841+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2477154" } ], "notes": [ { "category": "description", "text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.", "title": "Vulnerability description" }, { "category": "summary", "text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression", "title": "Vulnerability summary" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-44432" }, { "category": "external", "summary": "RHBZ#2477154", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44432" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432" }, { "category": "external", "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j", "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j" } ], "release_date": "2026-05-13T15:17:12.611000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression" }, { "cve": "CVE-2026-44488", "cwe": { "id": "CWE-770", "name": "Allocation of Resources Without Limits or Throttling" }, "discovery_date": "2026-06-11T17:01:36.836488+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2487949" } ], "notes": [ { "category": "description", "text": "A flaw was found in Axios, a promise-based HTTP client. When using the fetch adapter, Axios did not properly enforce configured request and response size limits. This vulnerability allows a remote attacker, through a malicious or compromised server, or by supplying a large data URL, to send or receive oversized data bodies. This can lead to resource exhaustion in server-side applications, resulting in a Denial of Service (DoS).", "title": "Vulnerability description" }, { "category": "summary", "text": "axios: Axios: Denial of Service due to unenforced request and response size limits", "title": "Vulnerability summary" }, { "category": "other", "text": "Important: A denial of service flaw was found in Axios, a JavaScript HTTP client library. This issue arises when applications utilize the `fetch` adapter, as configured request and response size limits are not properly enforced. A remote attacker could exploit this by sending or receiving excessively large data bodies, leading to resource exhaustion and potential denial of service in affected server-side applications.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-44488" }, { "category": "external", "summary": "RHBZ#2487949", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487949" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44488", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44488" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44488" }, { "category": "external", "summary": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf", "url": "https://github.com/axios/axios/security/advisories/GHSA-777c-7fjr-54vf" } ], "release_date": "2026-06-11T15:37:38.013000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "axios: Axios: Denial of Service due to unenforced request and response size limits" }, { "cve": "CVE-2026-44495", "cwe": { "id": "CWE-915", "name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes" }, "discovery_date": "2026-06-11T17:00:53.999811+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2487937" } ], "notes": [ { "category": "description", "text": "A flaw was found in Axios, a promise-based HTTP client. This vulnerability involves prototype pollution gadgets in the request configuration processing. If another vulnerability has already polluted the Object.prototype.transformResponse, affected Axios versions may incorrectly interpret this inherited value as part of the request configuration or as an option validator. Axios does not itself create the prototype pollution. Exploitability requires a separate prototype-pollution vulnerability or equivalent attacker control over Object.prototype before Axios creates a request.", "title": "Vulnerability description" }, { "category": "summary", "text": "axios: Axios: Information disclosure due to prototype pollution vulnerability", "title": "Vulnerability summary" }, { "category": "other", "text": "This Important vulnerability in Axios, a promise-based HTTP client, can lead to information disclosure, including credential theft and response hijacking, or denial of service. Exploitation requires a separate prototype pollution vulnerability in the same JavaScript process, allowing an attacker to control `Object.prototype.transformResponse`. Red Hat products using affected Axios versions are at risk if another component introduces such pollution.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-44495" }, { "category": "external", "summary": "RHBZ#2487937", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2487937" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44495", "url": "https://www.cve.org/CVERecord?id=CVE-2026-44495" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44495" }, { "category": "external", "summary": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw", "url": "https://github.com/axios/axios/security/advisories/GHSA-3g43-6gmg-66jw" } ], "release_date": "2026-06-11T15:33:12.433000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" }, { "category": "workaround", "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.0, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "axios: Axios: Information disclosure due to prototype pollution vulnerability" }, { "cve": "CVE-2026-48526", "cwe": { "id": "CWE-347", "name": "Improper Verification of Cryptographic Signature" }, "discovery_date": "2026-05-28T16:01:22.805235+00:00", "flags": [ { "label": "vulnerable_code_not_present", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2482734" } ], "notes": [ { "category": "description", "text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer's public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.", "title": "Vulnerability description" }, { "category": "summary", "text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens", "title": "Vulnerability summary" }, { "category": "other", "text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "fixed": [ "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src" ], "known_not_affected": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-48526" }, { "category": "external", "summary": "RHBZ#2482734", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526", "url": "https://www.cve.org/CVERecord?id=CVE-2026-48526" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526" }, { "category": "external", "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx", "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx" } ], "release_date": "2026-05-28T15:09:09.258000+00:00", "remediations": [ { "category": "vendor_fix", "date": "2026-07-01T11:09:18+00:00", "details": "For details on how to apply this update, refer to Ansible Automation Platform documentation.", "product_ids": [ "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src" ], "restart_required": { "category": "none" }, "url": "https://access.redhat.com/errata/RHSA-2026:34160" } ], "scores": [ { "cvss_v3": { "attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6-Developer-1.3:python3.12-urllib3-0:2.7.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-controller-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-cli-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-server-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-ui-0:4.7.13-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:automation-controller-venv-tower-0:4.7.13-2.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-0:1.2.9-3.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-base-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-event-stream-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-eda-controller-worker-services-0:1.2.9-3.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-0:2.6.20260701-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-config-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-gateway-server-0:2.6.20260701-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-hub-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:automation-platform-ui-0:2.6.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+activitystream-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+api_documentation-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+authentication-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+channel_auth-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+feature_flags-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+jwt_consumer-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+oauth2_provider-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rbac-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+redis_client-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+resource_registry-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base+rest_filters-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-django-ansible-base-0:2.6.20260701-2.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-galaxy-ng-0:4.11.10-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pulp-container-0:2.19.12-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt+crypto-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-pyjwt-0:2.13.0-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.src", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debuginfo-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.aarch64", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.ppc64le", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.s390x", "9Base-Ansible-Automation-Platform-2.6:python3.12-pysequoia-debugsource-0:0.1.34-1.el9ap.x86_64", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.noarch", "9Base-Ansible-Automation-Platform-2.6:python3.12-urllib3-0:2.7.0-1.el9ap.src" ] } ], "threats": [ { "category": "impact", "details": "Important" } ], "title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens" } ] }