https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 12:41:43 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-00136 bdu:2026-00136 https://cve.radiocsirt.org/vuln/bdu:2026-00136 https://cve.radiocsirt.org/vuln/euvd-2026-260736 EUVD-2026-260736 https://cve.radiocsirt.org/vuln/euvd-2026-260736 https://cve.radiocsirt.org/vuln/fkie_cve-2025-49521 <p>A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as Jinja2 templates. This vulnerability allows authenticated users to inject expressions that execute commands or access sensitive files on the EDA worker. In OpenShift, it can lead to service account token theft.</p> <p>A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as Jinja2 templates. This vulnerability allows authenticated users to inject expressions that execute commands or access sensitive files on the EDA worker. In OpenShift, it can lead to service account token theft.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-49521 https://cve.radiocsirt.org/vuln/ghsa-g6ph-9xfv-87c2 <p>A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as Jinja2 templates. This vulnerability allows authenticated users to inject expressions that execute commands or access sensitive files on the EDA worker. In OpenShift, it can lead to service account token theft.</p> <p>A flaw was found in the EDA component of the Ansible Automation Platform, where user-supplied Git branch or refspec values are evaluated as Jinja2 templates. This vulnerability allows authenticated users to inject expressions that execute commands or access sensitive files on the EDA worker. In OpenShift, it can lead to service account token theft.</p> https://cve.radiocsirt.org/vuln/ghsa-g6ph-9xfv-87c2 https://cve.radiocsirt.org/vuln/rhsa-2025:9986 <p>net/http: Request smuggling due to acceptance of invalid chunked data in net/http event-driven-ansible: Authenticated Argument Injection in Git URL in EDA Project Creation event-driven-ansible: Template Injection via Git Branch and Refspec in EDA Projects</p> <p>net/http: Request smuggling due to acceptance of invalid chunked data in net/http event-driven-ansible: Authenticated Argument Injection in Git URL in EDA Project Creation event-driven-ansible: Template Injection via Git Branch and Refspec in EDA Projects</p> https://cve.radiocsirt.org/vuln/rhsa-2025:9986 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1437 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um beliebige Befehle auszuführen, Informationen offenzulegen oder um einen Request-Smuggling Angriff durchzuführen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Ansible Automation Platform ausnutzen, um beliebige Befehle auszuführen, Informationen offenzulegen oder um einen Request-Smuggling Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1437