Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.9
Red Hat Automation Controller and Receptor may allow unauthorized actions
published 25 days ago
Summary
Several parts of Red Hat Ansible Automation Platform 2.6—including Automation Controller, Receptor, Automation Gateway Proxy, and the Python SQL parsing libraries—contain weaknesses that could let an attacker perform actions they should not be able to. This could expose data or disrupt automated processes. Apply the latest Red Hat update without delay.
What to do
- Update redhat automation-controller-venv-tower to version 0:4.7.17-1.el9ap.
- Update redhat receptor to version 0:1.6.8-1.el10ap.
- Update redhat receptor to version 0:1.6.8-1.el9ap.
- Update redhat automation-gateway-proxy-server to version 0:2.6.17-3.el9ap.
- Update redhat python-sqlparse to version 0:0.6.0-1.el10ap.
- Update redhat python3-sqlparse to version 0:0.6.0-1.el10ap.
- Update redhat python3.12-sqlparse to version 0:0.6.0-1.el9ap.
- Update redhat automation-platform-ui to version 0:2.6.14-1.el9ap.
- Update redhat automation-controller to version 0:4.7.17-1.el9ap.
- Update redhat automation-controller-cli to version 0:4.7.17-1.el9ap.
- Update redhat automation-controller-server to version 0:4.7.17-1.el9ap.
- Update redhat automation-controller-ui to version 0:4.7.17-1.el9ap.
- Update redhat python3.12-gitpython to version 0:3.1.60-1.el9ap.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-controller-venv-tower |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el10 | redhat | receptor |
< 0:1.6.8-1.el10ap Fix: upgrade to 0:1.6.8-1.el10ap
|
| Red Hat:ansible_automation_platform_developer:2.6::el9 | redhat | receptor |
< 0:1.6.8-1.el9ap Fix: upgrade to 0:1.6.8-1.el9ap
|
| Red Hat:ansible_automation_platform_inside:2.6::el9 | redhat | receptor |
< 0:1.6.8-1.el9ap Fix: upgrade to 0:1.6.8-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-gateway-proxy-server |
< 0:2.6.17-3.el9ap Fix: upgrade to 0:2.6.17-3.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | receptor |
< 0:1.6.8-1.el9ap Fix: upgrade to 0:1.6.8-1.el9ap
|
| Red Hat:ansible_automation_platform_developer:2.6::el10 | redhat | python-sqlparse |
< 0:0.6.0-1.el10ap Fix: upgrade to 0:0.6.0-1.el10ap
|
| Red Hat:ansible_automation_platform_developer:2.6::el10 | redhat | python3-sqlparse |
< 0:0.6.0-1.el10ap Fix: upgrade to 0:0.6.0-1.el10ap
|
| Red Hat:ansible_automation_platform:2.6::el10 | redhat | python-sqlparse |
< 0:0.6.0-1.el10ap Fix: upgrade to 0:0.6.0-1.el10ap
|
| Red Hat:ansible_automation_platform:2.6::el10 | redhat | python3-sqlparse |
< 0:0.6.0-1.el10ap Fix: upgrade to 0:0.6.0-1.el10ap
|
| Red Hat:ansible_automation_platform_developer:2.6::el9 | redhat | python3.12-sqlparse |
< 0:0.6.0-1.el9ap Fix: upgrade to 0:0.6.0-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | python3.12-sqlparse |
< 0:0.6.0-1.el9ap Fix: upgrade to 0:0.6.0-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-platform-ui |
< 0:2.6.14-1.el9ap Fix: upgrade to 0:2.6.14-1.el9ap
|
| Red Hat:ansible_automation_platform_developer:2.6::el9 | redhat | automation-controller |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform_developer:2.6::el9 | redhat | automation-controller-cli |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-controller |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-controller-cli |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-controller-server |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | automation-controller-ui |
< 0:4.7.17-1.el9ap Fix: upgrade to 0:4.7.17-1.el9ap
|
| Red Hat:ansible_automation_platform:2.6::el9 | redhat | python3.12-gitpython |
< 0:3.1.60-1.el9ap Fix: upgrade to 0:3.1.60-1.el9ap
|
Original advisory text
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
References
- https://access.redhat.com/errata/RHSA-2026:71113 Vendor Advisory
- https://access.redhat.com/security/updates/classification/#critical Third Party Advisory
- https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6... Third Party Advisory
- https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6... Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2484204 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2490556 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2498122 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2508411 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2509975 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2509976 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2510021 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2510719 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512367 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512368 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512369 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512371 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512372 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512374 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2512375 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2514175 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515815 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515820 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515827 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515838 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515839 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2515840 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517518 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517523 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517527 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517772 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2517893 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2523205 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527046 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527073 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527085 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527090 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527096 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527100 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527112 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527117 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527118 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527123 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527126 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527128 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527139 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527140 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527145 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527151 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527154 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527156 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527187 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527189 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527190 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527191 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527195 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527196 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527198 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527199 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527210 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527211 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527213 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527214 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2527222 Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2530744 Third Party Advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_71113.... Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-12564 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-12564 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-12564 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-33818 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-33818 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-33818 Vendor Advisory
- https://go.dev/cl/814980 Third Party Advisory
- https://go.dev/issue/80405 Third Party Advisory
- https://groups.google.com/g/golang-announce/c/94pEornpRlI Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-5972 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-42504 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-42504 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-42504 Vendor Advisory
- https://go.dev/cl/774481 Third Party Advisory
- https://go.dev/issue/79217 Third Party Advisory
- https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-5038 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-54284 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-54284 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-54284 Vendor Advisory
- https://github.com/andialbrecht/sqlparse/commit/939b129e24c0ad5d51368b1aa72fffca... Third Party Advisory
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-pwgv-4x5q-6m9f Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-56853 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56853 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56853 Vendor Advisory
- https://go.dev/cl/795540 Third Party Advisory
- https://go.dev/issue/80205 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6089 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56858 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56858 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56858 Vendor Advisory
- https://go.dev/cl/807100 Third Party Advisory
- https://go.dev/issue/80435 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6091 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56859 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56859 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56859 Vendor Advisory
- https://go.dev/cl/803320 Third Party Advisory
- https://go.dev/issue/80481 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6088 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56860 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56860 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56860 Vendor Advisory
- https://go.dev/cl/803681 Third Party Advisory
- https://go.dev/issue/80494 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6218 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-56862 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-56862 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-56862 Vendor Advisory
- https://go.dev/cl/804261 Third Party Advisory
- https://go.dev/issue/80528 Third Party Advisory
- https://pkg.go.dev/vuln/GO-2026-6090 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-59869 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-59869 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-59869 Vendor Advisory
- https://github.com/nodeca/js-yaml/commit/24f13e79ee1343a7e30bd6f6c9d9cdbf0ac9b2b... Third Party Advisory
- https://github.com/nodeca/js-yaml/commit/59423c6f8cdc78742ac00e25a4dd39ef16b702e... Third Party Advisory
- https://github.com/nodeca/js-yaml/releases/tag/3.15.0 Third Party Advisory
- https://github.com/nodeca/js-yaml/releases/tag/4.3.0 Third Party Advisory
- https://github.com/nodeca/js-yaml/security/advisories/GHSA-52cp-r559-cp3m Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-59893 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-59893 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-59893 Vendor Advisory
- https://github.com/andialbrecht/sqlparse/commit/d1d80602741f77ec78e5a04ce4719244... Third Party Advisory
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-prg7-hcfm-mfcr Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-67214 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-67214 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-67214 Vendor Advisory
- https://github.com/ai/nanoid/commit/6ccc67bbaba71d3d77a21d9b636f4171a268ce49 Third Party Advisory
- https://github.com/ai/nanoid/releases/tag/5.1.16 Third Party Advisory
- https://www.vulncheck.com/advisories/nanoid-before-infinite-loop-via-negative-si... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-67322 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-67322 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-67322 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-environment-variable-exfil... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-67323 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-67323 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-67323 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-956x-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-ungu... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-67325 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-67325 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-67325 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-2f96-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-command-injection-via-opti... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-69153 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-69153 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-69153 Vendor Advisory
- https://github.com/postcss/postcss/commit/7beca139e70f9075c6b19700fcb00dd8033e5d... Third Party Advisory
- https://github.com/postcss/postcss/releases/tag/8.5.19 Third Party Advisory
- https://github.com/postcss/postcss/security/advisories/GHSA-fxqj-rqcc-2cmp Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-71458 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71458 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71458 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71459 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71459 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71459 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71460 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71460 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71460 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71462 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71462 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71462 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71463 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71463 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71463 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71464 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71464 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71464 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71465 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71465 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71465 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-71491 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-71491 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-71491 Vendor Advisory
- https://github.com/andialbrecht/sqlparse/commit/ef2012a5eeb491e604dea2b00d516904... Third Party Advisory
- https://github.com/andialbrecht/sqlparse/security/advisories/GHSA-f2ff-p2ww-7p4p Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-73086 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-73086 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-73086 Vendor Advisory
- https://github.com/ai/nanoid/commit/7087969281cab8ba8ae3babf1894e819068b3bb4 Third Party Advisory
- https://github.com/ai/nanoid/commit/821dfed7b5db7f88e92f56c60eef32c8135077c3 Third Party Advisory
- https://github.com/ai/nanoid/commit/b0036ed60dc9facd7f1191a50dfb3076500202ac Third Party Advisory
- https://github.com/ai/nanoid/releases/tag/3.3.12 Third Party Advisory
- https://github.com/ai/nanoid/releases/tag/5.1.11 Third Party Advisory
- https://github.com/ai/nanoid/security/advisories/GHSA-xwg4-73v4-xw9w Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-75838 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-75838 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-75838 Vendor Advisory
- https://github.com/cure53/DOMPurify/security/advisories/GHSA-55q2-fjhq-7xh7 Third Party Advisory
- https://www.vulncheck.com/advisories/dompurify-before-cross-site-scripting-via-i... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-75884 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-75884 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-75884 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-78679 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-78679 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-78679 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-3wxw-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-arbitrary-file-read-via-ta... Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-84375 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84375 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84375 Vendor Advisory
- https://github.com/nodeca/js-yaml/commit/3485bc06ff8a0251505f44a00414d90df246663... Third Party Advisory
- https://github.com/nodeca/js-yaml/commit/6a8e05f9a485188ed730ac81e81ae221352ef48... Third Party Advisory
- https://github.com/nodeca/js-yaml/commit/d90b6612a5a84385bdcb556c44578eac76dc0f6... Third Party Advisory
- https://github.com/nodeca/js-yaml/pull/797 Third Party Advisory
- https://github.com/nodeca/js-yaml/releases/tag/3.15.2 Third Party Advisory
- https://github.com/nodeca/js-yaml/releases/tag/4.3.2 Third Party Advisory
- https://github.com/nodeca/js-yaml/security/advisories/GHSA-2883-xcg3-v3hh Third Party Advisory
- https://access.redhat.com/security/cve/CVE-2026-84470 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84470 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84470 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84474 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84474 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84474 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84486 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84486 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84486 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84499 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84499 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84499 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84502 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84502 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84502 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84638 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84638 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84638 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84643 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84643 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84643 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84644 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84644 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84644 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84679 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84679 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84679 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84680 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84680 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84680 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84683 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84683 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84683 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84684 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84684 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84684 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84686 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84686 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84686 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84689 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84689 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84689 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84691 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84691 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84691 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84692 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84692 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84692 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84703 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84703 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84703 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84706 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84706 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84706 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84707 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84707 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84707 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84708 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84708 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84708 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84709 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84709 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84709 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84711 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84711 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84711 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84712 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84712 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84712 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84714 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84714 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84714 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84716 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84716 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84716 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84717 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84717 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84717 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84718 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84718 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84718 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84719 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84719 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84719 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84720 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84720 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84720 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-84724 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-84724 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-84724 Vendor Advisory
- https://access.redhat.com/security/cve/CVE-2026-87817 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-87817 Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-87817 Vendor Advisory
- https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-239g-... Third Party Advisory
- https://www.vulncheck.com/advisories/gitpython-before-3.1.60-remote-code-executi... Third Party Advisory
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker full control (estimated)
Timeline
Published24 Sep 2026
Updated24 Sep 2026
First seen24 Sep 2026
Sources
RHSA-2026:71113 · OSV
Track software like this
Free during beta