Skip to content
OpenAdvisories
High WID-SEC-2026-2452 11 CVEs

Red Hat Ansible Automation Platform (node-tar, linkify-it, protobufjs, brace-expansion, fast-uri, DOMPurify): Mehrere Schwachstellen

Published Jul 21, 2026 · Updated Nov 11, 2026 · Revision 35 · de

Vendor: Dell Vendor: Fedora Vendor: IBM Vendor: Oracle Vendor: Red Hat Vendor: RESF Vendor: Splunk Product: Ansible Automation Platform Product: Enterprise Product: Enterprise Linux Product: Linux Product: Linux Product: MQ Product: openshift Product: QRadar SIEM Product: Rocky Linux Product: Secure Connect Gateway

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Cross-Site-Scripting-Angriffe durchzuführen, Daten zu manipulieren, einen Denial-of-Service-Zustand auszulösen oder beliebigen Code auszuführen.

Product

Red Hat Ansible Automation Platform ist eine End-to-End-Automatisierungsplattform für die Systemkonfiguration, die Softwarebereitstellung und die Orchestrierung erweiterter Workflows.

Vulnerabilities 11

  • Critical 9.2
    CVE-2026-59873

    node-tar: Decompression/parse DoS via unlimited input

    node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, allowing a small …

    isaacs node-tar prism lerna Debian Ubuntu Wolfi npm
  • High 8.7
    CVE-2026-48801

    linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop

    linkify-it is a links recognition library with full Unicode support. Prior to 5.0.1, LinkifyIt.prototype.match, the package's primary public API, has O(N²) algorithmic complexity for inputs containing many fuzzy links or emails because the JavaScript-level sc…

    markdown-it linkify-it opensearch-dashboards-3-dashboards-observability node-markdown-it Ubuntu Wolfi npm
  • High 8.7
    CVE-2026-59874

    node-tar: Negative tar entry size causes infinite loop in archive replace

    node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.18, tar.replace accepts a checksum-valid tar header with a negative base-256 encoded entry size, causing the archive scanner to make no progress while repeatedly parsing the same header.…

    isaacs node-tar prism lerna Debian Ubuntu Wolfi npm
  • High 8.1
    CVE-2026-44291

    protobufjs: Code generation gadget after prototype pollution

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode functions. If Object.prototype had a…

    protobufjs protobuf.js renovate kubeflow-centraldashboard Wolfi npm
  • High 7.7
    CVE-2026-13149

    brace-expansion: DoS via exponential-time expansion of consecutive non-expanding {} groups

    brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a crafted string to expand(), directly or transit…

    juliangruber brace-expansion langfuse-3-worker katib-suggestion-hyperopt Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-13676

    fast-uri vulnerable to host confusion via failed IDN canonicalization

    fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, silently leaving the host in its original Unicode form…

    fast-uri fast-uri prism opensearch-dashboards-3 Debian Ubuntu Wolfi npm
  • High 7.5
    CVE-2026-44289

    protobufjs: Denial of service through unbounded protobuf recursion

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skipping unknown group fields and generated decoding of n…

    protobufjs protobuf.js renovate kubeflow-centraldashboard Wolfi npm
  • High 7.5
    CVE-2026-44290

    protobufjs: Process-wide denial of service through unsafe option paths

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf schema or JSON descrip…

    protobufjs protobuf.js renovate kubeflow-centraldashboard Wolfi npm
  • Medium 6.3
    CVE-2026-49978

    DOMPurify IN_PLACE Sanitization Bypass via Attached Shadow Root Inside <template>.content

    DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.7, DOMPurify IN_PLACE sanitization could skip shadow contents attached to an element inside <template>.content, allowing attacker-controlled markup such as event ha…

    cure53 DOMPurify langfuse-3-worker nextcloud-server-33 Debian Ubuntu Wolfi npm
  • Medium 5.3
    CVE-2026-44292

    protobufjs: Prototype injection in generated message constructors

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated message constructors copied enumerable properties from a provided properties object without filtering the __proto__ key. If an application …

    protobufjs protobuf.js renovate kubeflow-centraldashboard Wolfi npm
  • Medium 5.3
    CVE-2026-45740

    protobufjs: Denial of Service via unbounded recursive JSON descriptor expansion

    protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.8 and 8.2.0, protobufjs could recurse without a depth limit while expanding nested JSON descriptors through Root.fromJSON() and Namespace.addJSON(). A crafted JSON descripto…

    protobufjs protobuf.js langfuse-3-worker renovate Wolfi npm

Revision history

  1. #35

    Neue Updates von Oracle Linux aufgenommen

  2. #34

    Neue Updates von Oracle Linux aufgenommen

  3. #33

    Neue Updates von Red Hat aufgenommen

  4. #32

    Neue Updates von IBM aufgenommen

  5. #31

    Neue Updates von Splunk-SVD aufgenommen

  6. #30

    Neue Updates von Red Hat aufgenommen

  7. #29

    Neue Updates von Oracle Linux aufgenommen

  8. #28

    Neue Updates von Oracle Linux aufgenommen

  9. #27

    Neue Updates von Red Hat aufgenommen

  10. #26

    Neue Updates von IBM und Red Hat aufgenommen

  11. #25

    Neue Updates von Red Hat aufgenommen

  12. #24

    Neue Updates von Red Hat aufgenommen

  13. #23

    Neue Updates von Red Hat aufgenommen

  14. #22

    Neue Updates von Oracle Linux und Red Hat aufgenommen

  15. #21

    Neue Updates von Red Hat aufgenommen

  16. #20

    Neue Updates von Dell aufgenommen

  17. #19

    Neue Updates von Red Hat aufgenommen

  18. #18

    Neue Updates von Fedora aufgenommen

  19. #17

    Neue Updates von Red Hat aufgenommen

  20. #16

    Neue Updates von Red Hat aufgenommen

  21. #15

    Neue Updates von Red Hat aufgenommen

  22. #14

    Neue Updates von Red Hat aufgenommen

  23. #13

    Neue Updates von Red Hat aufgenommen

  24. #12

    Neue Updates von Red Hat aufgenommen

  25. #11

    Neue Updates von Red Hat aufgenommen

References