Skip to content
OpenAdvisories
High WID-SEC-2026-0935 11 CVEs

Red Hat Ansible Automation Platform: Mehrere Schwachstellen

Published Mar 31, 2026 · Updated Nov 9, 2026 · Revision 47 · de

Vendor: amazon Vendor: Debian Vendor: Fedora Vendor: HCL Software Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: Splunk Vendor: SUSE Product: Ansible Automation Platform Product: App Connect Enterprise Product: BigFix Product: Concert Product: Db2 Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: Linux 2 Product: openshift Product: Rocky Linux Product: SOAR

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder Cross-Site-Scripting-Angriffe durchzuführen.

Product

Red Hat Ansible Automation Platform ist eine End-to-End-Automatisierungsplattform für die Systemkonfiguration, die Softwarebereitstellung und die Orchestrierung erweiterter Workflows.

Vulnerabilities 11

  • Critical 9.8
    CVE-2026-1615

    jsonpath has Arbitrary Code Injection via Unsafe Evaluation of JSON Path Expressions

    Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to process JSON Path input, which is not designed to handle unt…

    jsonpath npm
  • High 8.6
    CVE-2026-25990

    Pillow has an out-of-bounds write when loading PSD images

    Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1.

    python-pillow Pillow open-webui kubeflow-pipelines-visualization-server Debian Ubuntu Alpine Wolfi PyPI
  • High 8.2
    CVE-2026-26007

    cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to 46.0.5, the public_key_from_numbers (or EllipticCurvePublicNumbers.public_key()), EllipticCurvePublicNumbers.public_key(), load_der_public_key() a…

    pyca cryptography open-webui kubeflow-pipelines-apiserver Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • High 8.2
    CVE-2026-28498

    Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding

    Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OIDC) ID Tokens. Specifically, the inter…

    authlib authlib python-authlib python-authlib Debian Ubuntu PyPI
  • High 7.7
    CVE-2026-28802

    Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification

    Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty signature was passing the signature verification step wit…

    authlib authlib airflow-3 python-authlib Debian Ubuntu Wolfi PyPI
  • High 7.5
    CVE-2025-69223

    AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb

    AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below allow a zip bomb to be used to execute a DoS against the AIOHTTP server. An attacker may be able to send a compressed request that when decompressed by A…

    aio-libs aiohttp open-webui airflow-3 Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  • High 7.5
    CVE-2026-25639

    Axios affected by Denial of Service via __proto__ Key in mergeConfig

    Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ as an own property. An attacker can tr…

    axios axios langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-29074

    SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)

    SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files. From version 2.1.0 to before version 2.8.1, from version 3.0.0 to before version 3.3.3, and before version 4.0.1, SVGO accepts XML with custom entities,…

    svg svgo vitess-23 svgo Debian Wolfi npm
  • High 7.5
    CVE-2026-30827

    express-rate-limit: IPv4-mapped IPv6 addresses bypass per-client rate limiting (all IPv4 clients share one bucket on dual-stack servers)

    express-rate-limit is a basic rate-limiting middleware for Express. In versions starting from 8.0.0 and prior to versions 8.0.2, 8.1.1, 8.2.2, and 8.3.0, the default keyGenerator in express-rate-limit applies IPv6 subnet masking (/56 by default) to all addres…

    express-rate-limit express-rate-limit langfuse-3-worker express-rate-limit Wolfi npm
  • High 7.5
    CVE-2026-30922

    pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payl…

    pyasn1 pyasn1 kubeflow-pipelines-apiserver airflow-3 Debian Ubuntu Azure Linux Wolfi PyPI
  • Low 2.9
    CVE-2025-69873

    ajv has ReDoS when using `$data` option

    ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON Pointer syntax ($data reference), which is passed directly to t…

    ajv.js ajv langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm

Revision history

  1. #47

    Neue Updates von Red Hat aufgenommen

  2. #46

    Neue Updates von Red Hat aufgenommen

  3. #45

    Neue Updates von Red Hat aufgenommen

  4. #44

    Neue Updates von Oracle Linux aufgenommen

  5. #43

    Neue Updates von Splunk-SVD aufgenommen

  6. #42

    Neue Updates von Red Hat aufgenommen

  7. #41

    Neue Updates von IBM aufgenommen

  8. #40

    Neue Updates von IBM aufgenommen

  9. #39

    Neue Updates von Red Hat aufgenommen

  10. #38

    Neue Updates von Red Hat aufgenommen

  11. #37

    Neue Updates von Oracle Linux aufgenommen

  12. #36

    Neue Updates von Oracle Linux aufgenommen

  13. #35

    Neue Updates von Red Hat aufgenommen

  14. #34

    Neue Updates von Red Hat aufgenommen

  15. #33

    Neue Updates von Red Hat aufgenommen

  16. #32

    Neue Updates von Oracle Linux aufgenommen

  17. #31

    Neue Updates von Oracle Linux aufgenommen

  18. #30

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  19. #29

    Neue Updates von Red Hat aufgenommen

  20. #28

    Neue Updates von Red Hat aufgenommen

  21. #27

    Neue Updates von Red Hat aufgenommen

  22. #26

    Neue Updates von Red Hat aufgenommen

  23. #25

    Neue Updates von Red Hat aufgenommen

  24. #24

    Neue Updates von Red Hat aufgenommen

  25. #23

    Neue Updates von Red Hat aufgenommen

References