Known vulnerabilities in Red Hat Ansible Automation Platform 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2021-47952	python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python…	9.3 Critical	May 16, 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 High	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 High	May 13, 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42208	Exploited BerriAI LiteLLM SQL Injection Vulnerability	9.3 Critical	May 8, 2026
CVE-2026-42203	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	8.6 High	May 8, 2026
CVE-2026-42271	Exploited BerriAI LiteLLM Command Injection Vulnerability	8.7 High	May 8, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 High	May 5, 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 High	May 4, 2026
CVE-2026-7246	This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets…	7.2 High	Apr 30, 2026
CVE-2026-41481	LangChain is a framework for building agents and LLM-powered applications	6.5 Medium	Apr 24, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Medium	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-41140	Poetry is a dependency manager for Python	0.6 Low	Apr 24, 2026

Other Red Hat products