RHSA-2026:72712
Vulnerability from csaf_redhat - Published: 2026-09-28 16:29 - Updated: 2026-09-29 18:24Summary
Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update
Severity
Important
Notes
Topic: Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.
Details: Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub
user experience that simplifies the automation experience for Ansible users of all skill levels.
The Ansible plug-ins provide curated content and features to accelerate Ansible learner
onboarding and streamline Ansible use case adoption across your organization.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in multer. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by initiating and then aborting or sending malformed multipart uploads. This action leaves orphaned partial files on the disk, which can lead to the exhaustion of available disk space without requiring any specific application bug.
7.5 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows malicious code running within the sandbox to bypass the configured memory allocation limit. By crafting specific calls to Buffer.concat or Buffer.from with attacker-controlled lengths, the sandbox code can perform large, synchronous memory allocations on the host system. This can exhaust the host process's memory, leading to a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in urllib. This HTTP client for Node.js can be exploited by a remote attacker due to improper handling of cross-origin redirects. When following redirects, urllib reuses sensitive request headers, such as Authorization and Cookie, across different origins. This can lead to the leakage of credentials to an attacker-controlled server, potentially allowing the attacker to reuse these credentials against the original service.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Moderate
A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object's constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Moderate
A flaw was found in the `compression` Node.js and Express middleware. A remote unauthenticated attacker can exploit this vulnerability by repeatedly initiating and then prematurely aborting connections while compressed responses are being sent. This action prevents the zlib stream, used for compression, from being properly destroyed, leading to a memory leak. Over time, this memory exhaustion can cause the server to crash, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in multer, a Node.js middleware for handling multipart/form-data uploads. When a request using disk storage is aborted during an upload, file writes that complete after multer's cleanup process are not removed. This can leave orphaned files on disk. A remote unauthenticated attacker can repeatedly initiate and abort uploads to accumulate these orphaned files, which can exhaust disk space and lead to a denial of service.
5.3 (Medium)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Moderate
A flaw was found in isomorphic-git. This prototype pollution vulnerability in the getRemoteInfo function allows a malicious Git server operator to manipulate object properties by advertising specially crafted reference names. This can reroute network operations through an attacker-controlled proxy, leading to the transmission of user credentials to the attacker.
7.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in adm-zip. A remote attacker could exploit this vulnerability by crafting a malicious ZIP archive containing highly compressible entries that declare a zero uncompressed size. This oversight prevents the application of zlib decompression output limits, leading to excessive memory consumption and ultimately a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in vm2. Sandboxed code can bypass the configured timeout mechanism by using the FinalizationRegistry feature. This allows an attacker to execute a busy loop in a cleanup callback, which is invoked outside the timeout accounting. Consequently, this can block the host event loop indefinitely, leading to a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in vm2, a sandbox for Node.js. When the NodeVM embedder uses a builtin wildcard with negative entries to deny specific modules, such as 'fs' for file system access, the denylist mechanism fails to block subpaths like 'fs/promises'. This allows sandboxed code to bypass the intended restrictions and access the promise-based file system API. An attacker can exploit this to perform arbitrary file system operations, including creating and writing files, which may lead to a sandbox escape and arbitrary code execution.
8.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in vm2, a JavaScript sandbox. This vulnerability allows a sandboxed script to bypass security restrictions designed to prevent asynchronous code execution. An attacker can exploit this by using specific Promise methods to assimilate malicious 'thenables,' enabling code to run outside of the intended execution timeout. This can lead to unauthorized resource usage and continued execution after the host system expects the sandbox to be terminated.
7.1 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
A flaw was found in vm2. This vulnerability allows an attacker to bypass the `bufferAllocLimit` enforcement on `ArrayBuffer`, `SharedArrayBuffer`, and `TypedArray` constructors. By doing so, the attacker can allocate arbitrary host memory, leading to memory exhaustion and a Denial of Service (DoS) condition for the affected system.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-5038
Threats
Impact
Important
References
137 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Ansible Automation Platform 2.1 delivers an Ansible-first Red Hat Developer Hub\nuser experience that simplifies the automation experience for Ansible users of all skill levels.\nThe Ansible plug-ins provide curated content and features to accelerate Ansible learner\nonboarding and streamline Ansible use case adoption across your organization.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:72712",
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-19534",
"url": "https://access.redhat.com/security/cve/CVE-2026-19534"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-47683",
"url": "https://access.redhat.com/security/cve/CVE-2026-47683"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-5038",
"url": "https://access.redhat.com/security/cve/CVE-2026-5038"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55553",
"url": "https://access.redhat.com/security/cve/CVE-2026-55553"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59869",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-59879",
"url": "https://access.redhat.com/security/cve/CVE-2026-59879"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-82417",
"url": "https://access.redhat.com/security/cve/CVE-2026-82417"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84375",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87776",
"url": "https://access.redhat.com/security/cve/CVE-2026-87776"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-88932",
"url": "https://access.redhat.com/security/cve/CVE-2026-88932"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-89011",
"url": "https://access.redhat.com/security/cve/CVE-2026-89011"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92000",
"url": "https://access.redhat.com/security/cve/CVE-2026-92000"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92942",
"url": "https://access.redhat.com/security/cve/CVE-2026-92942"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92958",
"url": "https://access.redhat.com/security/cve/CVE-2026-92958"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92959",
"url": "https://access.redhat.com/security/cve/CVE-2026-92959"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-92961",
"url": "https://access.redhat.com/security/cve/CVE-2026-92961"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform",
"url": "https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_72712.json"
}
],
"title": "Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update",
"tracking": {
"current_release_date": "2026-09-29T18:24:30+00:00",
"generator": {
"date": "2026-09-29T18:24:30+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.0"
}
},
"id": "RHSA-2026:72712",
"initial_release_date": "2026-09-28T16:29:02+00:00",
"revision_history": [
{
"date": "2026-09-28T16:29:02+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-28T16:29:03+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-29T18:24:30+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Ansible Automation Platform 2.1",
"product": {
"name": "Red Hat Ansible Automation Platform 2.1",
"product_id": "Red Hat Ansible Automation Platform 2.1",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:ansible_portal:2.1"
}
}
}
],
"category": "product_family",
"name": "Red Hat Ansible Automation Platform"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64",
"product": {
"name": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64",
"product_id": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/automation-portal@sha256%3A2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d?arch=amd64\u0026repository_url=registry.redhat.io/ansible-automation-platform/automation-portal\u0026tag=1790254963"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64 as a component of Red Hat Ansible Automation Platform 2.1",
"product_id": "Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
},
"product_reference": "registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64",
"relates_to_product_reference": "Red Hat Ansible Automation Platform 2.1"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-5038",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-06-15T16:01:19.525752+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2488935"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multer. This vulnerability allows a remote attacker to trigger a Denial of Service (DoS) by initiating and then aborting or sending malformed multipart uploads. This action leaves orphaned partial files on the disk, which can lead to the exhaustion of available disk space without requiring any specific application bug.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multer: Multer: Denial of Service via aborted or malformed multipart uploads",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in `multer` when configured to use `diskStorage`. An attacker can exploit this flaw by initiating and then aborting or sending malformed multipart uploads, leading to the accumulation of orphaned partial files and eventual disk space exhaustion on affected Red Hat products that utilize `multer` for file handling.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5038"
},
{
"category": "external",
"summary": "RHBZ#2488935",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2488935"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5038",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5038"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5038",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5038"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/expressjs/multer/security/advisories/GHSA-3p4h-7m6x-2hcm",
"url": "https://github.com/expressjs/multer/security/advisories/GHSA-3p4h-7m6x-2hcm"
}
],
"release_date": "2026-06-15T14:23:24.230000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "multer: Multer: Denial of Service via aborted or malformed multipart uploads"
},
{
"cve": "CVE-2026-19534",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-09-04T17:21:01.599799+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2528759"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in undici. A remote attacker can exploit this vulnerability by responding with an unrequested WebSocket subprotocol during the opening handshake. This causes the undici WebSocket client to crash the entire Node.js process, leading to a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "undici: undici: Denial of Service via unrequested WebSocket subprotocol",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in undici\u0027s WebSocket client, which can lead to a Node.js process crash. The vulnerability is triggered when an application connects to a malicious or compromised server that responds with an unrequested WebSocket subprotocol, allowing a remote, unauthenticated attacker to cause a denial of service in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-19534"
},
{
"category": "external",
"summary": "RHBZ#2528759",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2528759"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-19534",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-19534"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-19534",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-19534"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5",
"url": "https://github.com/nodejs/undici/security/advisories/GHSA-rfgv-xxqx-mfg5"
}
],
"release_date": "2026-09-04T17:10:05.081000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "undici: undici: Denial of Service via unrequested WebSocket subprotocol"
},
{
"cve": "CVE-2026-47683",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-17T21:11:29.394094+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2517643"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, an open-source virtual machine (VM) sandbox for Node.js. This vulnerability allows malicious code running within the sandbox to bypass the configured memory allocation limit. By crafting specific calls to Buffer.concat or Buffer.from with attacker-controlled lengths, the sandbox code can perform large, synchronous memory allocations on the host system. This can exhaust the host process\u0027s memory, leading to a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Denial of Service due to memory allocation limit bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in the vm2 sandbox library allows malicious code to bypass memory allocation limits, leading to host process exhaustion and a Denial of Service. This is particularly relevant for Red Hat products like Ansible Automation Platform and Red Hat Developer Hub that utilize vm2 for executing untrusted Node.js code, as it can compromise the availability of the host system.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-47683"
},
{
"category": "external",
"summary": "RHBZ#2517643",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2517643"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-47683",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-47683"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-47683",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-47683"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/commit/3ffb315512e634cf85c447375e85d6c83d00a4bd",
"url": "https://github.com/patriksimek/vm2/commit/3ffb315512e634cf85c447375e85d6c83d00a4bd"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/releases/tag/3.11.6",
"url": "https://github.com/patriksimek/vm2/releases/tag/3.11.6"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-gmc2-2x9w-cgh9",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-gmc2-2x9w-cgh9"
}
],
"release_date": "2026-08-17T20:55:32.019000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Denial of Service due to memory allocation limit bypass"
},
{
"cve": "CVE-2026-55553",
"cwe": {
"id": "CWE-201",
"name": "Insertion of Sensitive Information Into Sent Data"
},
"discovery_date": "2026-08-25T16:32:13.263310+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2523609"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in urllib. This HTTP client for Node.js can be exploited by a remote attacker due to improper handling of cross-origin redirects. When following redirects, urllib reuses sensitive request headers, such as Authorization and Cookie, across different origins. This can lead to the leakage of credentials to an attacker-controlled server, potentially allowing the attacker to reuse these credentials against the original service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "urllib: urllib: Credential leakage via cross-origin redirects",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55553"
},
{
"category": "external",
"summary": "RHBZ#2523609",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2523609"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55553",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55553"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55553",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55553"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/commit/7c86c465883ebd3dea5109c87d7bbe3b00960a16",
"url": "https://github.com/node-modules/urllib/commit/7c86c465883ebd3dea5109c87d7bbe3b00960a16"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/commit/811a8d56e64e540bf6a19bf8b3737692f05d5c46",
"url": "https://github.com/node-modules/urllib/commit/811a8d56e64e540bf6a19bf8b3737692f05d5c46"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/pull/812",
"url": "https://github.com/node-modules/urllib/pull/812"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/pull/813",
"url": "https://github.com/node-modules/urllib/pull/813"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/releases/tag/v2.44.1",
"url": "https://github.com/node-modules/urllib/releases/tag/v2.44.1"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/releases/tag/v4.9.1",
"url": "https://github.com/node-modules/urllib/releases/tag/v4.9.1"
},
{
"category": "external",
"summary": "https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78",
"url": "https://github.com/node-modules/urllib/security/advisories/GHSA-hq3h-g68c-hp78"
}
],
"release_date": "2026-08-25T16:18:21.519000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "urllib: urllib: Credential leakage via cross-origin redirects"
},
{
"cve": "CVE-2026-59869",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-07-08T16:01:38.408322+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498122"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser and dumper. A remote attacker could exploit this vulnerability by providing a specially crafted YAML document containing a chain of mappings with merge keys. This could cause the parser to consume excessive CPU resources, leading to a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via crafted YAML documents",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important. Red Hat products utilizing `js-yaml` to process untrusted YAML input are susceptible to a denial of service, as a remote attacker can provide a crafted document that consumes excessive CPU resources. This is considered Important due to the potential for service disruption without requiring authentication or complex attack vectors.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59869"
},
{
"category": "external",
"summary": "RHBZ#2498122",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498122"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59869",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59869"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59869"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"url": "https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"url": "https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.0"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m"
}
],
"release_date": "2026-07-08T15:15:54.675000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "To reduce exposure, restrict the processing of untrusted YAML documents by applications that rely on `js-yaml`. Implement robust input validation and sanitization for all YAML data originating from external or untrusted sources. Consider limiting network access to services that parse YAML content to trusted networks or clients through appropriate firewall configurations.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via crafted YAML documents"
},
{
"cve": "CVE-2026-59879",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-07-08T17:02:16.432203+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498158"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Immutable.js, a library providing persistent immutable data structures. This vulnerability occurs when specific List operations, such as List#set or List#setSize, are provided with an index or size value within a particular large range. An attacker could exploit this by providing specially crafted input, leading to an uncatchable infinite loop or unbounded memory allocation, ultimately causing a Denial of Service (DoS) for applications using the library.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact denial of service vulnerability in Immutable.js affects Red Hat products that process untrusted input through List operations. An attacker can trigger an infinite loop or unbounded memory allocation by providing specially crafted large index values, leading to a service disruption. Additionally, silent data corruption may occur due to integer wrapping.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-59879"
},
{
"category": "external",
"summary": "RHBZ#2498158",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498158"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-59879",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-59879"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-59879"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84",
"url": "https://github.com/immutable-js/immutable-js/commit/a1a1ee412dcaa380ab325196283d06594ffe4b84"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a",
"url": "https://github.com/immutable-js/immutable-js/commit/f0bc997d8eb9886aff2236635aa210a95a04304a"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v4.3.9"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8",
"url": "https://github.com/immutable-js/immutable-js/releases/tag/v5.1.8"
},
{
"category": "external",
"summary": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735",
"url": "https://github.com/immutable-js/immutable-js/security/advisories/GHSA-v56q-mh7h-f735"
}
],
"release_date": "2026-07-08T15:47:24.885000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications should implement input validation to reject or clamp any externally supplied List index or key-path segment that exceeds a sane maximum, specifically values greater than or equal to 2^30. Additionally, running request handling in isolated worker processes with capped heap sizes (e.g., using `--max-old-space-size`) can contain the impact of a potential process abort.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "immutable-js: Immutable.js: Denial of Service due to mishandling of large index values in List operations"
},
{
"cve": "CVE-2026-82417",
"cwe": {
"id": "CWE-1287",
"name": "Improper Validation of Specified Type of Input"
},
"discovery_date": "2026-08-30T00:00:50.379994+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2525936"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in qs. The `qs.stringify` function, responsible for serializing objects, does not properly validate the `isBuffer` property of an object\u0027s constructor before attempting to invoke it. An unauthenticated attacker can provide specially crafted input that, when processed and then serialized by `qs.stringify`, triggers a `TypeError`. This vulnerability can lead to a Denial of Service (DoS), causing affected applications to return a 500 error or, in certain scenarios, terminate the application process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "qs: qs: Denial of Service via improper validation in stringify function",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A denial of service vulnerability was found in the qs package for Node.js. The stringify function does not verify that constructor.isBuffer is callable before invoking it. An attacker who can influence object shape, for example through query parameters parsed with allowPrototypes: true as Express 4 does by default, can cause qs.stringify to throw a TypeError when that data is re-serialized. In typical Node.js HTTP frameworks the error is caught per request and returns HTTP 500. In code paths without an error boundary, such as async handlers or background jobs, the process may exit.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-82417"
},
{
"category": "external",
"summary": "RHBZ#2525936",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2525936"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-82417",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-82417"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-82417"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6",
"url": "https://github.com/ljharb/qs/commit/e83d321ffafb38cf210683ac31714fce6ce1c6c6"
},
{
"category": "external",
"summary": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g",
"url": "https://github.com/ljharb/qs/security/advisories/GHSA-4mjr-xmp4-gh2g"
}
],
"release_date": "2026-08-29T23:51:27.634000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "If an immediate upgrade to qs 6.16.0 is not feasible, avoid re-serializing attacker-influenced parsed query or body objects with qs.stringify. Where qs.parse is used directly, set allowPrototypes: false unless prototype keys are required. For Express applications, review whether the default query parser configuration is necessary. Wrapping qs.stringify calls in try/catch can limit impact to individual requests.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "qs: qs: Denial of Service via improper validation in stringify function"
},
{
"cve": "CVE-2026-84375",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-09-01T21:51:30.205823+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2527118"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser. An attacker can exploit this by providing a specially crafted YAML document that causes the parser to perform excessive processing when handling merge keys with empty sources. This can lead to prolonged CPU consumption, effectively causing a denial of service (DoS) for applications that process untrusted YAML input.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in js-yaml, affecting applications that process untrusted YAML input. The flaw allows an attacker to craft a small YAML document that, when parsed, can lead to prolonged CPU consumption due to inefficient merge key processing, potentially exhausting system resources. This is particularly relevant where applications handle external YAML data and have merge processing enabled by default.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84375"
},
{
"category": "external",
"summary": "RHBZ#2527118",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2527118"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84375",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84375"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84375"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639",
"url": "https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df2466639"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480",
"url": "https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef480"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b",
"url": "https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6b"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/pull/797",
"url": "https://github.com/nodeca/js-yaml/pull/797"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/3.15.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2",
"url": "https://github.com/nodeca/js-yaml/releases/tag/4.3.2"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh"
}
],
"release_date": "2026-09-01T21:43:13.617000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing"
},
{
"cve": "CVE-2026-87776",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-09-11T11:40:59.000487+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531852"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `compression` Node.js and Express middleware. A remote unauthenticated attacker can exploit this vulnerability by repeatedly initiating and then prematurely aborting connections while compressed responses are being sent. This action prevents the zlib stream, used for compression, from being properly destroyed, leading to a memory leak. Over time, this memory exhaustion can cause the server to crash, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "compression: compression: Denial of Service via memory leak on premature response close",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat has rated this vulnerability as Important. A remote unauthenticated attacker can cause a denial of service by repeatedly aborting connections while compressed responses are being sent, which can lead to memory exhaustion and server termination.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87776"
},
{
"category": "external",
"summary": "RHBZ#2531852",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531852"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87776",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87776"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87776",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87776"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95",
"url": "https://github.com/expressjs/compression/security/advisories/GHSA-vc2v-76pw-4v95"
}
],
"release_date": "2026-09-11T11:24:55.150000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Update the compression middleware to version 1.8.2 or later. No supported workaround is currently available if the affected version cannot be updated.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "compression: compression: Denial of Service via memory leak on premature response close"
},
{
"cve": "CVE-2026-88932",
"cwe": {
"id": "CWE-459",
"name": "Incomplete Cleanup"
},
"discovery_date": "2026-09-14T09:00:57.669780+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2532957"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in multer, a Node.js middleware for handling multipart/form-data uploads. When a request using disk storage is aborted during an upload, file writes that complete after multer\u0027s cleanup process are not removed. This can leave orphaned files on disk. A remote unauthenticated attacker can repeatedly initiate and abort uploads to accumulate these orphaned files, which can exhaust disk space and lead to a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "multer: multer: Denial of Service via orphaned disk writes on aborted uploads",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate flaw in `multer` can lead to a denial of service in Red Hat products that process multipart/form-data uploads. A remote unauthenticated attacker can repeatedly initiate and abort uploads, causing orphaned files to accumulate and exhaust available disk space. This risk is present in deployments where `multer` is configured for disk storage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-88932"
},
{
"category": "external",
"summary": "RHBZ#2532957",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2532957"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-88932",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-88932"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-88932",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-88932"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/expressjs/multer/security/advisories/GHSA-3pph-fpjx-jg34",
"url": "https://github.com/expressjs/multer/security/advisories/GHSA-3pph-fpjx-jg34"
}
],
"release_date": "2026-09-14T08:46:12.896000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Until updates are available, administrators can implement the following mitigations to reduce the risk of disk exhaustion:\n\n1. Monitor disk usage on systems running Red Hat Developer Hub or Ansible Portal and set up alerts for unusual disk consumption patterns.\n\n2. Implement rate limiting on file upload endpoints to restrict the number of upload requests from a single IP address or user account within a given time period.\n\n3. If authentication is not strictly required for file upload endpoints, enable authentication to reduce the attack surface to authenticated users only.\n\n4. Periodically clean up orphaned temporary files in multer\u0027s storage directory. The default upload directory is typically in the system temp folder or a configured uploads directory.\n\n5. Set disk quota limits for the user account or partition used by the application to prevent complete disk exhaustion from affecting the entire system.\n\nFor production environments, apply updates as they become available from Red Hat product teams.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "multer: multer: Denial of Service via orphaned disk writes on aborted uploads"
},
{
"cve": "CVE-2026-89011",
"cwe": {
"id": "CWE-915",
"name": "Improperly Controlled Modification of Dynamically-Determined Object Attributes"
},
"discovery_date": "2026-09-10T20:01:29.938454+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2531620"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in isomorphic-git. This prototype pollution vulnerability in the getRemoteInfo function allows a malicious Git server operator to manipulate object properties by advertising specially crafted reference names. This can reroute network operations through an attacker-controlled proxy, leading to the transmission of user credentials to the attacker.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "isomorphic-git: isomorphic-git: Information disclosure via prototype pollution in getRemoteInfo function.",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-89011"
},
{
"category": "external",
"summary": "RHBZ#2531620",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2531620"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-89011",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-89011"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-89011",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-89011"
},
{
"category": "external",
"summary": "https://github.com/isomorphic-git/isomorphic-git/commit/b3db111885230bac9a648e0a2312c65ca66f76eb",
"url": "https://github.com/isomorphic-git/isomorphic-git/commit/b3db111885230bac9a648e0a2312c65ca66f76eb"
},
{
"category": "external",
"summary": "https://github.com/isomorphic-git/isomorphic-git/pull/2426",
"url": "https://github.com/isomorphic-git/isomorphic-git/pull/2426"
},
{
"category": "external",
"summary": "https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.0",
"url": "https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.42.0"
},
{
"category": "external",
"summary": "https://github.com/isomorphic-git/isomorphic-git/security/advisories/GHSA-83vg-jxvh-fx76",
"url": "https://github.com/isomorphic-git/isomorphic-git/security/advisories/GHSA-83vg-jxvh-fx76"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/isomorphic-git-prototype-pollution-via-getremoteinfo",
"url": "https://www.vulncheck.com/advisories/isomorphic-git-prototype-pollution-via-getremoteinfo"
}
],
"release_date": "2026-09-10T19:56:25.335000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "isomorphic-git: isomorphic-git: Information disclosure via prototype pollution in getRemoteInfo function."
},
{
"cve": "CVE-2026-92000",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-15T21:26:17.292353+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2534417"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in adm-zip. A remote attacker could exploit this vulnerability by crafting a malicious ZIP archive containing highly compressible entries that declare a zero uncompressed size. This oversight prevents the application of zlib decompression output limits, leading to excessive memory consumption and ultimately a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "adm-zip: adm-zip: Denial of Service via crafted ZIP archives with zero declared uncompressed size",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `adm-zip` can lead to a denial of service in Red Hat products that process ZIP archives. By crafting malicious ZIP files with entries declaring zero uncompressed size, an attacker can exploit a flaw in zlib decompression limits, causing affected systems to exhaust memory resources. This impacts various components across Red Hat Enterprise Linux, OpenShift, and other platforms that rely on `adm-zip` for archive handling.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92000"
},
{
"category": "external",
"summary": "RHBZ#2534417",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2534417"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92000",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92000"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92000",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92000"
},
{
"category": "external",
"summary": "https://github.com/cthackers/adm-zip",
"url": "https://github.com/cthackers/adm-zip"
},
{
"category": "external",
"summary": "https://github.com/cthackers/adm-zip/blob/v0.6.0/methods/inflater.js",
"url": "https://github.com/cthackers/adm-zip/blob/v0.6.0/methods/inflater.js"
},
{
"category": "external",
"summary": "https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6",
"url": "https://github.com/cthackers/adm-zip/commit/491600683dacb6cb9fe0718a0eeb9cb5eb49afa6"
},
{
"category": "external",
"summary": "https://github.com/cthackers/adm-zip/commit/8bc411184de1b5ca28138c53074fb61119994dde",
"url": "https://github.com/cthackers/adm-zip/commit/8bc411184de1b5ca28138c53074fb61119994dde"
},
{
"category": "external",
"summary": "https://github.com/cthackers/adm-zip/security/advisories/GHSA-rcw4-f5rp-g42v",
"url": "https://github.com/cthackers/adm-zip/security/advisories/GHSA-rcw4-f5rp-g42v"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/adm-zip-0.5.14-through-0.6.0-denial-of-service-via-zero-declared-uncompressed-size",
"url": "https://www.vulncheck.com/advisories/adm-zip-0.5.14-through-0.6.0-denial-of-service-via-zero-declared-uncompressed-size"
}
],
"release_date": "2026-09-15T20:56:45.780000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "adm-zip: adm-zip: Denial of Service via crafted ZIP archives with zero declared uncompressed size"
},
{
"cve": "CVE-2026-92942",
"cwe": {
"id": "CWE-1100",
"name": "Insufficient Isolation of System-Dependent Functions"
},
"discovery_date": "2026-09-17T13:55:06.460890+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2536038"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2. Sandboxed code can bypass the configured timeout mechanism by using the FinalizationRegistry feature. This allows an attacker to execute a busy loop in a cleanup callback, which is invoked outside the timeout accounting. Consequently, this can block the host event loop indefinitely, leading to a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Denial of Service via timeout bypass in sandboxed code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in vm2, affecting Red Hat Ansible Automation Platform and Red Hat Developer Hub. The flaw allows sandboxed code to bypass configured timeout mechanisms by exploiting the FinalizationRegistry feature, leading to an unbounded busy loop that can block the host event loop indefinitely. This can severely impact the availability of services that rely on vm2 for executing untrusted code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92942"
},
{
"category": "external",
"summary": "RHBZ#2536038",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536038"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92942",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92942"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92942",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92942"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r4fx-v8hh-22mv",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-r4fx-v8hh-22mv"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vm2-before-3.11.7-timeout-bypass-via-finalizationregistry",
"url": "https://www.vulncheck.com/advisories/vm2-before-3.11.7-timeout-bypass-via-finalizationregistry"
}
],
"release_date": "2026-09-17T13:46:05.537000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Denial of Service via timeout bypass in sandboxed code"
},
{
"cve": "CVE-2026-92958",
"cwe": {
"id": "CWE-1220",
"name": "Insufficient Granularity of Access Control"
},
"discovery_date": "2026-09-17T13:55:46.855461+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2536039"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, a sandbox for Node.js. When the NodeVM embedder uses a builtin wildcard with negative entries to deny specific modules, such as \u0027fs\u0027 for file system access, the denylist mechanism fails to block subpaths like \u0027fs/promises\u0027. This allows sandboxed code to bypass the intended restrictions and access the promise-based file system API. An attacker can exploit this to perform arbitrary file system operations, including creating and writing files, which may lead to a sandbox escape and arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Sandbox escape via denylist bypass in NodeVM",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Red Hat products utilizing vm2, such as Red Hat Ansible Automation Platform and Red Hat Developer Hub, are affected by a sandbox escape vulnerability. This flaw allows sandboxed code to bypass denylist restrictions and access the host filesystem, enabling unauthorized file creation, writing, and other operations from within the isolated environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92958"
},
{
"category": "external",
"summary": "RHBZ#2536039",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536039"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92958",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92958"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92958",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92958"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6rh5-qq4q-97xh",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-6rh5-qq4q-97xh"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vm2-before-3.11.7-denylist-bypass-via-fs-promises",
"url": "https://www.vulncheck.com/advisories/vm2-before-3.11.7-denylist-bypass-via-fs-promises"
}
],
"release_date": "2026-09-17T13:46:15.549000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:L",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Sandbox escape via denylist bypass in NodeVM"
},
{
"cve": "CVE-2026-92959",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-09-17T13:56:39.069432+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2536043"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2, a JavaScript sandbox. This vulnerability allows a sandboxed script to bypass security restrictions designed to prevent asynchronous code execution. An attacker can exploit this by using specific Promise methods to assimilate malicious \u0027thenables,\u0027 enabling code to run outside of the intended execution timeout. This can lead to unauthorized resource usage and continued execution after the host system expects the sandbox to be terminated.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Asynchronous code execution bypass via Promise thenable assimilation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability. The vm2 sandbox, used in Red Hat Ansible Automation Platform and Red Hat Developer Hub, fails to properly enforce asynchronous code execution restrictions. This allows a sandboxed script to execute code outside of its configured timeout, potentially leading to prolonged or unintended execution within the host environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92959"
},
{
"category": "external",
"summary": "RHBZ#2536043",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536043"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92959",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92959"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92959",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92959"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-f8gf-w286-fmq2",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-f8gf-w286-fmq2"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vm2-before-3.11.8-allowasync-bypass-via-promise-thenable",
"url": "https://www.vulncheck.com/advisories/vm2-before-3.11.8-allowasync-bypass-via-promise-thenable"
}
],
"release_date": "2026-09-17T13:46:16.252000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Asynchronous code execution bypass via Promise thenable assimilation"
},
{
"cve": "CVE-2026-92961",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-09-17T13:57:35.531366+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2536046"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in vm2. This vulnerability allows an attacker to bypass the `bufferAllocLimit` enforcement on `ArrayBuffer`, `SharedArrayBuffer`, and `TypedArray` constructors. By doing so, the attacker can allocate arbitrary host memory, leading to memory exhaustion and a Denial of Service (DoS) condition for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "vm2: vm2: Denial of Service via memory exhaustion",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in vm2, a JavaScript sandbox. A remote attacker can bypass internal resource limits within the sandbox, allowing them to allocate arbitrary host memory. This can lead to the exhaustion of system resources and a denial of service for the host system running applications that utilize vm2 to execute untrusted code.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-92961"
},
{
"category": "external",
"summary": "RHBZ#2536046",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2536046"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-92961",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-92961"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-92961",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-92961"
},
{
"category": "external",
"summary": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v836-6xw4-9cx3",
"url": "https://github.com/patriksimek/vm2/security/advisories/GHSA-v836-6xw4-9cx3"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/vm2-before-3.11.6-memory-exhaustion-dos-via-bufferalloclimit-bypass",
"url": "https://www.vulncheck.com/advisories/vm2-before-3.11.6-memory-exhaustion-dos-via-bufferalloclimit-bypass"
}
],
"release_date": "2026-09-17T13:46:17.621000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-28T16:29:02+00:00",
"details": "For more about Ansible plugins for Red Hat Developer Hub, see References links",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:72712"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Ansible Automation Platform 2.1:registry.redhat.io/ansible-automation-platform/automation-portal@sha256:2659ae04974d930322789112efc9181bc7cf3990999a204eba45aec0639f0c3d_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "vm2: vm2: Denial of Service via memory exhaustion"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…