CriticalFix available
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
Type: advisorySources: OSV
- Products
- automation-controller-venv-tower, automation-gateway-proxy-server, automation-gateway-server, python3.12-gitpython, python3.12-sqlparse, receptor
- Affected versions
- Not specified
- Fixed versions
- 0:0.6.0-1.el8ap, 0:0.6.0-1.el9ap, 0:1.6.8-1.el8ap, 0:1.6.8-1.el9ap, 0:2.5.10-8.el8ap, 0:2.5.20260923-1.el8ap, 0:2.5.20260923-1.el9ap, 0:2.6.17-3.el9ap, 0:3.1.60-1.el8ap, 0:3.1.60-1.el9ap, 0:4.6.33-1.el8ap, 0:4.6.33-1.el9ap
- CVEs
- CVE-2026-12564, CVE-2026-33818, CVE-2026-42504, CVE-2026-54284, CVE-2026-56853, CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862, CVE-2026-59869, CVE-2026-59893, CVE-2026-67322, CVE-2026-67323, CVE-2026-67325, CVE-2026-69152, CVE-2026-69153, CVE-2026-71458, CVE-2026-71459, CVE-2026-71460, CVE-2026-71462, CVE-2026-71463, CVE-2026-71464, CVE-2026-71465, CVE-2026-71491, CVE-2026-75884, CVE-2026-84470, CVE-2026-84474, CVE-2026-84499, CVE-2026-84502, CVE-2026-84638, CVE-2026-84643, CVE-2026-84644, CVE-2026-84678, CVE-2026-84679, CVE-2026-84680, CVE-2026-84683, CVE-2026-84684, CVE-2026-84686, CVE-2026-84689, CVE-2026-84691, CVE-2026-84692, CVE-2026-84703, CVE-2026-84706, CVE-2026-84707, CVE-2026-84708, CVE-2026-84709, CVE-2026-84711, CVE-2026-84712, CVE-2026-84714, CVE-2026-84716, CVE-2026-84717, CVE-2026-84718, CVE-2026-84719, CVE-2026-84720, CVE-2026-84724, CVE-2026-87817, CVE-2026-87819
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 09:29 UTC · Revision 1
Source evidence
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
core-osv · Original sourcePublished 24 Sept 2026, 10:15 UTC
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
osv:RHSA-2026:71114
automation-controller-venv-tower
Fixed versions: 0:4.6.33-1.el8ap
automation-controller-venv-tower
Fixed versions: 0:4.6.33-1.el9ap
receptor
Fixed versions: 0:1.6.8-1.el8ap
receptor
Fixed versions: 0:1.6.8-1.el8ap
automation-gateway-proxy-server
Fixed versions: 0:2.5.10-8.el8ap
receptor
Fixed versions: 0:1.6.8-1.el8ap
receptor
Fixed versions: 0:1.6.8-1.el9ap
receptor
Fixed versions: 0:1.6.8-1.el9ap
automation-gateway-proxy-server
Fixed versions: 0:2.6.17-3.el9ap
receptor
Fixed versions: 0:1.6.8-1.el9ap
python3.12-sqlparse
Fixed versions: 0:0.6.0-1.el8ap
python3.12-sqlparse
Fixed versions: 0:0.6.0-1.el8ap
python3.12-sqlparse
Fixed versions: 0:0.6.0-1.el9ap
python3.12-sqlparse
Fixed versions: 0:0.6.0-1.el9ap
automation-gateway-server
Fixed versions: 0:2.5.20260923-1.el8ap
automation-gateway-server
Fixed versions: 0:2.5.20260923-1.el9ap
python3.12-gitpython
Fixed versions: 0:3.1.60-1.el8ap
python3.12-gitpython
Fixed versions: 0:3.1.60-1.el9ap
Complete source record
{
"id": "8d4ed1b396194a62cfeb9cf4d1a823b43e7925c8f69e959e51818c6e95ad12ad",
"url": "https://osv.dev/vulnerability/RHSA-2026%3A71114",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update",
"summary": "Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update",
"evidence": "osv:RHSA-2026:71114",
"products": [
{
"name": {
"value": "automation-controller-venv-tower",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.33-1.el8ap",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "automation-controller-venv-tower",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:4.6.33-1.el9ap",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "receptor",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.6.8-1.el8ap",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "receptor",
"evidence": "/affected/3/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.6.8-1.el8ap",
"evidence": "/affected/3/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "automation-gateway-proxy-server",
"evidence": "/affected/4/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.5.10-8.el8ap",
"evidence": "/affected/4/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "receptor",
"evidence": "/affected/5/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.6.8-1.el8ap",
"evidence": "/affected/5/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "receptor",
"evidence": "/affected/6/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.6.8-1.el9ap",
"evidence": "/affected/6/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "receptor",
"evidence": "/affected/7/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.6.8-1.el9ap",
"evidence": "/affected/7/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "automation-gateway-proxy-server",
"evidence": "/affected/8/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.6.17-3.el9ap",
"evidence": "/affected/8/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "receptor",
"evidence": "/affected/9/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:1.6.8-1.el9ap",
"evidence": "/affected/9/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.12-sqlparse",
"evidence": "/affected/10/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.6.0-1.el8ap",
"evidence": "/affected/10/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.12-sqlparse",
"evidence": "/affected/11/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.6.0-1.el8ap",
"evidence": "/affected/11/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.12-sqlparse",
"evidence": "/affected/12/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.6.0-1.el9ap",
"evidence": "/affected/12/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.12-sqlparse",
"evidence": "/affected/13/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:0.6.0-1.el9ap",
"evidence": "/affected/13/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "automation-gateway-server",
"evidence": "/affected/14/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.5.20260923-1.el8ap",
"evidence": "/affected/14/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "automation-gateway-server",
"evidence": "/affected/15/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:2.5.20260923-1.el9ap",
"evidence": "/affected/15/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.12-gitpython",
"evidence": "/affected/16/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.60-1.el8ap",
"evidence": "/affected/16/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "python3.12-gitpython",
"evidence": "/affected/17/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0:3.1.60-1.el9ap",
"evidence": "/affected/17/ranges"
}
],
"affected_versions": []
}
],
"severity": "critical",
"structured": {
"id": "RHSA-2026:71114",
"aliases": [
"RHSA-2026:71114"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.33-1.el8ap"
}
]
}
],
"package": {
"name": "automation-controller-venv-tower",
"purl": "pkg:rpm/redhat/automation-controller-venv-tower",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:4.6.33-1.el9ap"
}
]
}
],
"package": {
"name": "automation-controller-venv-tower",
"purl": "pkg:rpm/redhat/automation-controller-venv-tower",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.6.8-1.el8ap"
}
]
}
],
"package": {
"name": "receptor",
"purl": "pkg:rpm/redhat/receptor",
"ecosystem": "Red Hat:ansible_automation_platform_developer:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.6.8-1.el8ap"
}
]
}
],
"package": {
"name": "receptor",
"purl": "pkg:rpm/redhat/receptor",
"ecosystem": "Red Hat:ansible_automation_platform_inside:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.5.10-8.el8ap"
}
]
}
],
"package": {
"name": "automation-gateway-proxy-server",
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.6.8-1.el8ap"
}
]
}
],
"package": {
"name": "receptor",
"purl": "pkg:rpm/redhat/receptor",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.6.8-1.el9ap"
}
]
}
],
"package": {
"name": "receptor",
"purl": "pkg:rpm/redhat/receptor",
"ecosystem": "Red Hat:ansible_automation_platform_developer:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.6.8-1.el9ap"
}
]
}
],
"package": {
"name": "receptor",
"purl": "pkg:rpm/redhat/receptor",
"ecosystem": "Red Hat:ansible_automation_platform_inside:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.6.17-3.el9ap"
}
]
}
],
"package": {
"name": "automation-gateway-proxy-server",
"purl": "pkg:rpm/redhat/automation-gateway-proxy-server",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:1.6.8-1.el9ap"
}
]
}
],
"package": {
"name": "receptor",
"purl": "pkg:rpm/redhat/receptor",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.6.0-1.el8ap"
}
]
}
],
"package": {
"name": "python3.12-sqlparse",
"purl": "pkg:rpm/redhat/python3.12-sqlparse",
"ecosystem": "Red Hat:ansible_automation_platform_developer:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.6.0-1.el8ap"
}
]
}
],
"package": {
"name": "python3.12-sqlparse",
"purl": "pkg:rpm/redhat/python3.12-sqlparse",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.6.0-1.el9ap"
}
]
}
],
"package": {
"name": "python3.12-sqlparse",
"purl": "pkg:rpm/redhat/python3.12-sqlparse",
"ecosystem": "Red Hat:ansible_automation_platform_developer:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:0.6.0-1.el9ap"
}
]
}
],
"package": {
"name": "python3.12-sqlparse",
"purl": "pkg:rpm/redhat/python3.12-sqlparse",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.5.20260923-1.el8ap"
}
]
}
],
"package": {
"name": "automation-gateway-server",
"purl": "pkg:rpm/redhat/automation-gateway-server",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:2.5.20260923-1.el9ap"
}
]
}
],
"package": {
"name": "automation-gateway-server",
"purl": "pkg:rpm/redhat/automation-gateway-server",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.60-1.el8ap"
}
]
}
],
"package": {
"name": "python3.12-gitpython",
"purl": "pkg:rpm/redhat/python3.12-gitpython",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el8"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0:3.1.60-1.el9ap"
}
]
}
],
"package": {
"name": "python3.12-gitpython",
"purl": "pkg:rpm/redhat/python3.12-gitpython",
"ecosystem": "Red Hat:ansible_automation_platform:2.5::el9"
},
"database_specific": {
"source": "https://security.access.redhat.com/data/osv/RHSA-2026:71114.json"
}
}
],
"modified": "2026-10-20T10:14:51Z",
"provider": "osv",
"upstream": [
"CVE-2026-12564",
"CVE-2026-33818",
"CVE-2026-42504",
"CVE-2026-54284",
"CVE-2026-56853",
"CVE-2026-56858",
"CVE-2026-56859",
"CVE-2026-56860",
"CVE-2026-56862",
"CVE-2026-59869",
"CVE-2026-59893",
"CVE-2026-67322",
"CVE-2026-67323",
"CVE-2026-67325",
"CVE-2026-69152",
"CVE-2026-69153",
"CVE-2026-71458",
"CVE-2026-71459",
"CVE-2026-71460",
"CVE-2026-71462",
"CVE-2026-71463",
"CVE-2026-71464",
"CVE-2026-71465",
"CVE-2026-71491",
"CVE-2026-75884",
"CVE-2026-84470",
"CVE-2026-84474",
"CVE-2026-84499",
"CVE-2026-84502",
"CVE-2026-84638",
"CVE-2026-84643",
"CVE-2026-84644",
"CVE-2026-84678",
"CVE-2026-84679",
"CVE-2026-84680",
"CVE-2026-84683",
"CVE-2026-84684",
"CVE-2026-84686",
"CVE-2026-84689",
"CVE-2026-84691",
"CVE-2026-84692",
"CVE-2026-84703",
"CVE-2026-84706",
"CVE-2026-84707",
"CVE-2026-84708",
"CVE-2026-84709",
"CVE-2026-84711",
"CVE-2026-84712",
"CVE-2026-84714",
"CVE-2026-84716",
"CVE-2026-84717",
"CVE-2026-84718",
"CVE-2026-84719",
"CVE-2026-84720",
"CVE-2026-84724",
"CVE-2026-87817",
"CVE-2026-87819"
],
"references": [
"https://access.redhat.com/errata/RHSA-2026:71114",
"https://access.redhat.com/security/updates/classification/#critical",
"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases",
"https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading",
"https://bugzilla.redhat.com/show_bug.cgi?id=2484204",
"https://bugzilla.redhat.com/show_bug.cgi?id=2490556",
"https://bugzilla.redhat.com/show_bug.cgi?id=2498122",
"https://bugzilla.redhat.com/show_bug.cgi?id=2509975",
"https://bugzilla.redhat.com/show_bug.cgi?id=2509976",
"https://bugzilla.redhat.com/show_bug.cgi?id=2510021",
"https://bugzilla.redhat.com/show_bug.cgi?id=2510719",
"https://bugzilla.redhat.com/show_bug.cgi?id=2510722",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512367",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512368",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512369",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512371",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512372",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512374",
"https://bugzilla.redhat.com/show_bug.cgi?id=2512375",
"https://bugzilla.redhat.com/show_bug.cgi?id=2515815",
"https://bugzilla.redhat.com/show_bug.cgi?id=2515820",
"https://bugzilla.redhat.com/show_bug.cgi?id=2515827",
"https://bugzilla.redhat.com/show_bug.cgi?id=2515838",
"https://bugzilla.redhat.com/show_bug.cgi?id=2515839",
"https://bugzilla.redhat.com/show_bug.cgi?id=2515840",
"https://bugzilla.redhat.com/show_bug.cgi?id=2517518",
"https://bugzilla.redhat.com/show_bug.cgi?id=2517523",
"https://bugzilla.redhat.com/show_bug.cgi?id=2517527",
"https://bugzilla.redhat.com/show_bug.cgi?id=2517893",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527046",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527073",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527090",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527096",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527100",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527112",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527117",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527121",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527123",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527126",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527128",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527139",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527140",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527145",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527151",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527154",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527156",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527187",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527189",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527190",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527191",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527195",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527196",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527198",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527199",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527210",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527211",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527213",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527214",
"https://bugzilla.redhat.com/show_bug.cgi?id=2527222",
"https://bugzilla.redhat.com/show_bug.cgi?id=2530744",
"https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71114.json",
"https://access.redhat.com/security/cve/CVE-2026-12564",
"https://www.cve.org/CVERecord?id=CVE-2026-12564",
"https://nvd.nist.gov/vuln/detail/CVE-2026-12564",
"https://access.redhat.com/security/cve/CVE-2026-33818",
"https://www.cve.org/CVERecord?id=CVE-2026-33818",
"https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"https://go.dev/cl/814980",
"https://go.dev/issue/80405",
"https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"https://pkg.go.dev/vuln/GO-2026-5972",
"https://access.redhat.com/security/cve/CVE-2026-42504",
"https://www.cve.org/CVERecord?id=CVE-2026-42504",
"https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"https://go.dev/cl/774481",
"https://go.dev/issue/79217",
"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"https://pkg.go.dev/vuln/GO-2026-5038",
"https://access.redhat.com/security/cve/CVE-2026-54284",
"https://www.cve.org/CVERecord?id=CVE-2026-54284",
"https://nvd.nist.gov/vuln/detail/CVE-2026-54284",
"https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffcaca76f06f",
"https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f",
"https://access.redhat.com/security/cve/CVE-2026-56853",
"https://www.cve.org/CVERecord?id=CVE-2026-56853",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"https://go.dev/cl/795540",
"https://go.dev/issue/80205",
"https://pkg.go.dev/vuln/GO-2026-6089",
"https://access.redhat.com/security/cve/CVE-2026-56858",
"https://www.cve.org/CVERecord?id=CVE-2026-56858",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"https://go.dev/cl/807100",
"https://go.dev/issue/80435",
"https://pkg.go.dev/vuln/GO-2026-6091",
"https://access.redhat.com/security/cve/CVE-2026-56859",
"https://www.cve.org/CVERecord?id=CVE-2026-56859",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"https://go.dev/cl/803320",
"https://go.dev/issue/80481",
"https://pkg.go.dev/vuln/GO-2026-6088",
"https://access.redhat.com/security/cve/CVE-2026-56860",
"https://www.cve.org/CVERecord?id=CVE-2026-56860",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"https://go.dev/cl/803681",
"https://go.dev/issue/80494",
"https://pkg.go.dev/vuln/GO-2026-6218",
"https://access.redhat.com/security/cve/CVE-2026-56862",
"https://www.cve.org/CVERecord?id=CVE-2026-56862",
"https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"https://go.dev/cl/804261",
"https://go.dev/issue/80528",
"https://pkg.go.dev/vuln/GO-2026-6090",
"https://access.redhat.com/security/cve/CVE-2026-59869",
"https://www.cve.org/CVERecord?id=CVE-2026-59869",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59869",
"https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b7",
"https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e4",
"https://github.com/nodeca/js-yaml/releases/tag/3.15.0",
"https://github.com/nodeca/js-yaml/releases/tag/4.3.0",
"https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m",
"https://access.redhat.com/security/cve/CVE-2026-59893",
"https://www.cve.org/CVERecord?id=CVE-2026-59893",
"https://nvd.nist.gov/vuln/detail/CVE-2026-59893",
"https://github.com/andialbrecht/sqlparse/commit/d1d80602741f77ec78e5a04ce4719244cf32352e",
"https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr",
"https://access.redhat.com/security/cve/CVE-2026-67322",
"https://www.cve.org/CVERecord?id=CVE-2026-67322",
"https://nvd.nist.gov/vuln/detail/CVE-2026-67322",
"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573",
"https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfiltration-via-clone-from",
"https://access.redhat.com/security/cve/CVE-2026-67323",
"https://www.cve.org/CVERecord?id=CVE-2026-67323",
"https://nvd.nist.gov/vuln/detail/CVE-2026-67323",
"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-8gvw-wg5v",
"https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-unguarded-git-options",
"https://access.redhat.com/security/cve/CVE-2026-67325",
"https://www.cve.org/CVERecord?id=CVE-2026-67325",
"https://nvd.nist.gov/vuln/detail/CVE-2026-67325",
"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-g7mh-g2hx",
"https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-option-prefix-abbreviation",
"https://access.redhat.com/security/cve/CVE-2026-69152",
"https://www.cve.org/CVERecord?id=CVE-2026-69152",
"https://nvd.nist.gov/vuln/detail/CVE-2026-69152",
"https://github.com/juliangruber/brace-expansion/commit/139d015104e71433ad52a41d19467c48ecbb2c7d",
"https://github.com/juliangruber/brace-expansion/commit/1e30c930238d7162802d88a94189182def178dac",
"https://github.com/juliangruber/brace-expansion/commit/688a99eeaab02627c2b89ba8ba4821fecfa659cf",
"https://github.com/juliangruber/brace-expansion/commit/cb4b9e47cc2ec777c14b2b4492fb431a56f6a031",
"https://github.com/juliangruber/brace-expansion/security/advisories/GHSA-rgw5-rvv9-x895",
"https://access.redhat.com/security/cve/CVE-2026-69153",
"https://www.cve.org/CVERecord?id=CVE-2026-69153",
"https://nvd.nist.gov/vuln/detail/CVE-2026-69153",
"https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5da8",
"https://github.com/postcss/postcss/releases/tag/8.5.19",
"https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp",
"https://access.redhat.com/security/cve/CVE-2026-71458",
"https://www.cve.org/CVERecord?id=CVE-2026-71458",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71458",
"https://access.redhat.com/security/cve/CVE-2026-71459",
"https://www.cve.org/CVERecord?id=CVE-2026-71459",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71459",
"https://access.redhat.com/security/cve/CVE-2026-71460",
"https://www.cve.org/CVERecord?id=CVE-2026-71460",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71460",
"https://access.redhat.com/security/cve/CVE-2026-71462",
"https://www.cve.org/CVERecord?id=CVE-2026-71462",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71462",
"https://access.redhat.com/security/cve/CVE-2026-71463",
"https://www.cve.org/CVERecord?id=CVE-2026-71463",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71463",
"https://access.redhat.com/security/cve/CVE-2026-71464",
"https://www.cve.org/CVERecord?id=CVE-2026-71464",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71464",
"https://access.redhat.com/security/cve/CVE-2026-71465",
"https://www.cve.org/CVERecord?id=CVE-2026-71465",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71465",
"https://access.redhat.com/security/cve/CVE-2026-71491",
"https://www.cve.org/CVERecord?id=CVE-2026-71491",
"https://nvd.nist.gov/vuln/detail/CVE-2026-71491",
"https://github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904a3830c87",
"https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p",
"https://access.redhat.com/security/cve/CVE-2026-75884",
"https://www.cve.org/CVERecord?id=CVE-2026-75884",
"https://nvd.nist.gov/vuln/detail/CVE-2026-75884",
"https://access.redhat.com/security/cve/CVE-2026-84470",
"https://www.cve.org/CVERecord?id=CVE-2026-84470",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84470",
"https://access.redhat.com/security/cve/CVE-2026-84474",
"https://www.cve.org/CVERecord?id=CVE-2026-84474",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84474",
"https://access.redhat.com/security/cve/CVE-2026-84499",
"https://www.cve.org/CVERecord?id=CVE-2026-84499",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84499",
"https://access.redhat.com/security/cve/CVE-2026-84502",
"https://www.cve.org/CVERecord?id=CVE-2026-84502",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84502",
"https://access.redhat.com/security/cve/CVE-2026-84638",
"https://www.cve.org/CVERecord?id=CVE-2026-84638",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84638",
"https://access.redhat.com/security/cve/CVE-2026-84643",
"https://www.cve.org/CVERecord?id=CVE-2026-84643",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84643",
"https://access.redhat.com/security/cve/CVE-2026-84644",
"https://www.cve.org/CVERecord?id=CVE-2026-84644",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84644",
"https://access.redhat.com/security/cve/CVE-2026-84678",
"https://www.cve.org/CVERecord?id=CVE-2026-84678",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84678",
"https://access.redhat.com/security/cve/CVE-2026-84679",
"https://www.cve.org/CVERecord?id=CVE-2026-84679",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84679",
"https://access.redhat.com/security/cve/CVE-2026-84680",
"https://www.cve.org/CVERecord?id=CVE-2026-84680",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84680",
"https://access.redhat.com/security/cve/CVE-2026-84683",
"https://www.cve.org/CVERecord?id=CVE-2026-84683",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84683",
"https://access.redhat.com/security/cve/CVE-2026-84684",
"https://www.cve.org/CVERecord?id=CVE-2026-84684",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84684",
"https://access.redhat.com/security/cve/CVE-2026-84686",
"https://www.cve.org/CVERecord?id=CVE-2026-84686",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84686",
"https://access.redhat.com/security/cve/CVE-2026-84689",
"https://www.cve.org/CVERecord?id=CVE-2026-84689",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84689",
"https://access.redhat.com/security/cve/CVE-2026-84691",
"https://www.cve.org/CVERecord?id=CVE-2026-84691",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84691",
"https://access.redhat.com/security/cve/CVE-2026-84692",
"https://www.cve.org/CVERecord?id=CVE-2026-84692",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84692",
"https://access.redhat.com/security/cve/CVE-2026-84703",
"https://www.cve.org/CVERecord?id=CVE-2026-84703",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84703",
"https://access.redhat.com/security/cve/CVE-2026-84706",
"https://www.cve.org/CVERecord?id=CVE-2026-84706",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84706",
"https://access.redhat.com/security/cve/CVE-2026-84707",
"https://www.cve.org/CVERecord?id=CVE-2026-84707",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84707",
"https://access.redhat.com/security/cve/CVE-2026-84708",
"https://www.cve.org/CVERecord?id=CVE-2026-84708",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84708",
"https://access.redhat.com/security/cve/CVE-2026-84709",
"https://www.cve.org/CVERecord?id=CVE-2026-84709",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84709",
"https://access.redhat.com/security/cve/CVE-2026-84711",
"https://www.cve.org/CVERecord?id=CVE-2026-84711",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84711",
"https://access.redhat.com/security/cve/CVE-2026-84712",
"https://www.cve.org/CVERecord?id=CVE-2026-84712",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84712",
"https://access.redhat.com/security/cve/CVE-2026-84714",
"https://www.cve.org/CVERecord?id=CVE-2026-84714",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84714",
"https://access.redhat.com/security/cve/CVE-2026-84716",
"https://www.cve.org/CVERecord?id=CVE-2026-84716",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84716",
"https://access.redhat.com/security/cve/CVE-2026-84717",
"https://www.cve.org/CVERecord?id=CVE-2026-84717",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84717",
"https://access.redhat.com/security/cve/CVE-2026-84718",
"https://www.cve.org/CVERecord?id=CVE-2026-84718",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84718",
"https://access.redhat.com/security/cve/CVE-2026-84719",
"https://www.cve.org/CVERecord?id=CVE-2026-84719",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84719",
"https://access.redhat.com/security/cve/CVE-2026-84720",
"https://www.cve.org/CVERecord?id=CVE-2026-84720",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84720",
"https://access.redhat.com/security/cve/CVE-2026-84724",
"https://www.cve.org/CVERecord?id=CVE-2026-84724",
"https://nvd.nist.gov/vuln/detail/CVE-2026-84724",
"https://access.redhat.com/security/cve/CVE-2026-87817",
"https://www.cve.org/CVERecord?id=CVE-2026-87817",
"https://nvd.nist.gov/vuln/detail/CVE-2026-87817",
"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-whfq-7xj9",
"https://www.vulncheck.com/advisories/gitpython-before-3.1.60-remote-code-execution-via-git-directory-impersonation",
"https://access.redhat.com/security/cve/CVE-2026-87819",
"https://bugzilla.redhat.com/show_bug.cgi?id=2530742",
"https://www.cve.org/CVERecord?id=CVE-2026-87819",
"https://nvd.nist.gov/vuln/detail/CVE-2026-87819",
"https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx",
"https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos"
]
},
"related_cves": [
{
"value": "CVE-2026-12564",
"evidence": "/upstream"
},
{
"value": "CVE-2026-33818",
"evidence": "/upstream"
},
{
"value": "CVE-2026-42504",
"evidence": "/upstream"
},
{
"value": "CVE-2026-54284",
"evidence": "/upstream"
},
{
"value": "CVE-2026-56853",
"evidence": "/upstream"
},
{
"value": "CVE-2026-56858",
"evidence": "/upstream"
},
{
"value": "CVE-2026-56859",
"evidence": "/upstream"
},
{
"value": "CVE-2026-56860",
"evidence": "/upstream"
},
{
"value": "CVE-2026-56862",
"evidence": "/upstream"
},
{
"value": "CVE-2026-59869",
"evidence": "/upstream"
},
{
"value": "CVE-2026-59893",
"evidence": "/upstream"
},
{
"value": "CVE-2026-67322",
"evidence": "/upstream"
},
{
"value": "CVE-2026-67323",
"evidence": "/upstream"
},
{
"value": "CVE-2026-67325",
"evidence": "/upstream"
},
{
"value": "CVE-2026-69152",
"evidence": "/upstream"
},
{
"value": "CVE-2026-69153",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71458",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71459",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71460",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71462",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71463",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71464",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71465",
"evidence": "/upstream"
},
{
"value": "CVE-2026-71491",
"evidence": "/upstream"
},
{
"value": "CVE-2026-75884",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84470",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84474",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84499",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84502",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84638",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84643",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84644",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84678",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84679",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84680",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84683",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84684",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84686",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84689",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84691",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84692",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84703",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84706",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84707",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84708",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84709",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84711",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84712",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84714",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84716",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84717",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84718",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84719",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84720",
"evidence": "/upstream"
},
{
"value": "CVE-2026-84724",
"evidence": "/upstream"
},
{
"value": "CVE-2026-87817",
"evidence": "/upstream"
},
{
"value": "CVE-2026-87819",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 378836,
"published_at": "2026-09-24T10:15:16+00:00"
}