automation-platform-ui vulnerabilities (Red Hat)
85 vulnerabilities.
automation-platform-uiRed HatPotential SQL injection in column aliases via control characters5.4 Mediumautomation-platform-uiRed HatPotential denial-of-service vulnerability in django.utils.text.Truncator HTML methods7.5 Highautomation-platform-uiRed HatPotential SQL injection via raster lookups on PostGIS5.4 Mediumautomation-platform-uiRed HatPotential denial-of-service vulnerability via repeated headers when using ASGI7.5 Highautomation-platform-uiRed HatDenial of Service in Python Protobuf8.2 Highautomation-platform-uiRed Hatwheel Allows Arbitrary File Permission Modification via Path Traversal7.1 Highautomation-platform-uiRed HatPrototype Pollution Vulnerability in Lodash _.unset and _.omit functions6.9 Mediumautomation-platform-uiRed Hatpyasn1 has a DoS vulnerability in decoder7.5 Highautomation-platform-uiRed HatUnexpected session resumption in crypto/tls10.0 Criticalautomation-platform-uiRed HatMemory exhaustion in query parameter parsing in net/url7.5 Highautomation-platform-uiRed HatReact Router vulnerable to XSS via Open Redirects8.0 Highautomation-platform-uiRed HatReact Router SSR XSS in ScrollRestoration8.2 Highautomation-platform-uiRed HatReact Router has XSS Vulnerability7.6 Highautomation-platform-uiRed HatAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb7.5 Highautomation-platform-uiRed HatEvent-driven-ansible: sensitive internal headers disclosure in aap eda event streams6.7 Mediumautomation-platform-uiRed HatEvent-driven-ansible: event stream test mode exposes sensitive headers in aap eda6.7 Mediumautomation-platform-uiRed HatDjango vulnerable to partial directory traversal via archives3.1 Lowautomation-platform-uiRed Hattar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball8.7 Highautomation-platform-uiRed HatAIOHTTP: HTTP request smuggling via WebSocket upgrade6.3 Mediumautomation-platform-uiRed Hatfast-uri vulnerable to host confusion via percent-encoded authority delimiters7.5 Highautomation-platform-uiRed HatDOMPurify: FORBID_TAGS bypassed by function-based ADD_TAGS predicate (asymmetry with FORBID_ATTR fix)6.0 Medium