Vulnérabilités connues pour Red Hat Ansible Automation Platform 2

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2021-47952	python jsonpickle 2.0.0 contains a remote code execution vulnerability that allows attackers to execute arbitrary Python…	9.3 Critique	16 mai 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Moyenne	15 mai 2026
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 Élevée	13 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 Élevée	13 mai 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 Élevée	13 mai 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Moyenne	12 mai 2026
CVE-2026-42208	Exploitée BerriAI LiteLLM SQL Injection Vulnerability	9.3 Critique	8 mai 2026
CVE-2026-42203	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	8.6 Élevée	8 mai 2026
CVE-2026-42271	Exploitée BerriAI LiteLLM Command Injection Vulnerability	8.7 Élevée	8 mai 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	8 mai 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 Élevée	7 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026
CVE-2026-6322	fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them…	7.5 Élevée	5 mai 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 Élevée	4 mai 2026
CVE-2026-7246	This CVE record was assigned not following CNA/CVE rules and is not considered a valid vulnerability by the Pallets…	7.2 Élevée	30 avr. 2026
CVE-2026-41481	LangChain is a framework for building agents and LLM-powered applications	6.5 Moyenne	24 avr. 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Moyenne	24 avr. 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	24 avr. 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 Élevée	24 avr. 2026
CVE-2026-42044	Axios is a promise based HTTP client for the browser and Node.js	6.5 Moyenne	24 avr. 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	24 avr. 2026
CVE-2026-41140	Poetry is a dependency manager for Python	0.6 Faible	24 avr. 2026

Autres produits Red Hat