7.5
Élevée
CVE-2026-25679 url.Parse insufficiently validated the host/authority component and accepted some invalid URLs
Description
url.Parse insufficiently validated the host/authority component and accepted some invalid URLs.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat Ansible Automation Platform 2.6 for RHEL 10 | Versions non publiées | |
| Red Hat Enterprise Linux Server (v. 7 ELS) | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 8 | Versions non publiées | |
| Red Hat OpenShift Container Platform 4.12 1777001645 | premières → < 1777001645 | 1777001645 |
| Red Hat OpenShift Container Platform 4.13 1779889628 | premières → < 1779889628 | 1779889628 |
| Red Hat OpenShift Container Platform 4.16 1779254541 | premières → < 1779254541 | 1779254541 |
| Red Hat OpenShift Container Platform 4.18 1779787600 | premières → < 1779787600 | 1779787600 |
| Red Hat Satellite 6.16 for RHEL 8 | Versions non publiées | |
| Red Hat Ansible Automation Platform 2.5 for RHEL 9 | Versions non publiées |
Afficher les 209 autres branches Masquer les 209 autres branches
Autres CVE de Red Hat Ansible Automation Platform 2.6 for RHEL 10
Les 36 CVE de Red Hat Ansible Automation Platform 2.6 for RHEL 10 →
CVE-2026-11332
Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution
7.8
Élevée
CVE-2026-27145
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…
6.5
Moyenne
CVE-2026-39821
The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label
9.6
Critique
CVE-2026-33811
When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…
7.5
Élevée