automation-controller-server vulnerabilities (Red Hat)
90 vulnerabilities.
automation-controller-serverRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highautomation-controller-serverRed HatDenial of Service in Python Protobuf8.2 Highautomation-controller-serverRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 Highautomation-controller-serverRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumautomation-controller-serverRed Hatpyasn1 has a DoS vulnerability in decoder7.5 Highautomation-controller-serverRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highautomation-controller-serverRed HatReact Router vulnerable to XSS via Open Redirects8.0 Highautomation-controller-serverRed HatReact Router SSR XSS in ScrollRestoration8.2 Highautomation-controller-serverRed HatReact Router has XSS Vulnerability7.6 Highautomation-controller-serverRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 Highautomation-controller-serverRed HatAap-gateway: improper path validation in gateway allows credential exfiltration6.7 Mediumautomation-controller-serverRed HatPotential SQL injection via _connector keyword argument in QuerySet and Q objects9.1 Criticalautomation-controller-serverRed HatEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 Mediumautomation-controller-serverRed HatEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 Mediumautomation-controller-serverRed Hatquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 Highautomation-controller-serverRed HatAxios is vulnerable to DoS attack through lack of data size check7.5 Highautomation-controller-serverRed HatDjango Improper Output Neutralization for Logs vulnerability4.0 Mediumautomation-controller-serverRed Hatsetuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write7.7 Highautomation-controller-serverRed HatAutomation-controller: gain access to the k8s api server via job execution with container group6.6 Mediumautomation-controller-serverRed HatPulpcore: rbac permissions incorrectly assigned in tasks that create objects6.7 Mediumautomation-controller-serverRed HatDjango SQL injection vulnerability7.3 Highautomation-controller-serverRed HatDjango vulnerable to denial-of-service attack7.5 Highautomation-controller-serverRed HatDjango vulnerable to a denial-of-service attack7.5 Highautomation-controller-serverRed HatDjango memory consumption vulnerability7.5 Highautomation-controller-serverRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumautomation-controller-serverRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controller-serverRed HatDjango Path Traversal vulnerability4.3 Mediumautomation-controller-serverRed HatDjango vulnerable to user enumeration attack5.3 Mediumautomation-controller-serverRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controller-serverRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumautomation-controller-serverRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumautomation-controller-serverRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalautomation-controller-serverRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumautomation-controller-serverRed Hatpython-jose algorithm confusion with OpenSSH ECDSA keys6.5 Mediumautomation-controller-serverRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumautomation-controller-serverRed HatController: html injection in custom login info7.3 Highautomation-controller-serverRed HatSQL Injection in Django9.8 Criticalautomation-controller-serverRed HatSQL Injection in Django9.8 Criticalautomation-controller-serverRed Hatfast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 Highautomation-controller-serverRed HatDOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)6.0 Medium