automation-controller vulnerabilities (Red Hat)
92 vulnerabilities.
automation-controllerRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highautomation-controllerRed HatDenial of Service in Python Protobuf8.2 Highautomation-controllerRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 Highautomation-controllerRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumautomation-controllerRed Hatpyasn1 has a DoS vulnerability in decoder7.5 Highautomation-controllerRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highautomation-controllerRed HatReact Router vulnerable to XSS via Open Redirects8.0 Highautomation-controllerRed HatReact Router SSR XSS in ScrollRestoration8.2 Highautomation-controllerRed HatReact Router has XSS Vulnerability7.6 Highautomation-controllerRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 Highautomation-controllerRed HatAap-gateway: improper path validation in gateway allows credential exfiltration6.7 Mediumautomation-controllerRed HatPotential SQL injection via _connector keyword argument in QuerySet and Q objects9.1 Criticalautomation-controllerRed HatEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 Mediumautomation-controllerRed HatEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 Mediumautomation-controllerRed Hatquic-go has Client Crash Due to Premature HANDSHAKE_DONE Frame7.5 Highautomation-controllerRed HatAxios is vulnerable to DoS attack through lack of data size check7.5 Highautomation-controllerRed HatDjango Improper Output Neutralization for Logs vulnerability4.0 Mediumautomation-controllerRed Hatsetuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write7.7 Highautomation-controllerRed HatAutomation-controller: gain access to the k8s api server via job execution with container group6.6 Mediumautomation-controllerRed HatPulpcore: rbac permissions incorrectly assigned in tasks that create objects6.7 Mediumautomation-controllerRed HatDjango SQL injection vulnerability7.3 Highautomation-controllerRed HatDjango vulnerable to denial-of-service attack7.5 Highautomation-controllerRed HatDjango vulnerable to a denial-of-service attack7.5 Highautomation-controllerRed HatDjango memory consumption vulnerability7.5 Highautomation-controllerRed HatHPACK table poisoning in gRPC C++, Python & Ruby6.3 Mediumautomation-controllerRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controllerRed HatDjango Path Traversal vulnerability4.3 Mediumautomation-controllerRed HatDjango vulnerable to user enumeration attack5.3 Mediumautomation-controllerRed HatDjango vulnerable to Denial of Service7.5 Highautomation-controllerRed HatDenial of Service via crafted zip file in jaraco/zipp6.2 Mediumautomation-controllerRed HatProxy-Authorization request header isn't stripped during cross-origin redirects in urllib34.4 Mediumautomation-controllerRed HatUnexpected behavior from Is methods for IPv4-mapped IPv6 addresses in net/netip9.8 Criticalautomation-controllerRed HatMalformed DNS message can cause infinite loop in net5.9 Mediumautomation-controllerRed Hatpython-jose algorithm confusion with OpenSSH ECDSA keys6.5 Mediumautomation-controllerRed Hatsocial-auth-app-django Improper Handling of Case Sensitivity vulnerability4.9 Mediumautomation-controllerRed HatController: html injection in custom login info7.3 Highautomation-controllerRed HatDjango has regular expression denial of service vulnerability in EmailValidator/URLValidator7.5 Highautomation-controllerRed HatResource exhaustion in Django7.5 Highautomation-controllerRed HatSQL Injection in Django9.8 Criticalautomation-controllerRed HatSQL Injection in Django9.8 Criticalautomation-controllerRed Hatfast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 Highautomation-controllerRed HatDOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)6.0 Medium