Known vulnerabilities in ansible-navigator (Red Hat package) - page 2

Vendor: Red Hat Inc.

Software CPE: cpe:2.3:o:red_hat:ansible-navigator_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 27

Public exploits: 4

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Vulnerabilities (27)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59343	CWE-22	High	No	No	25.8.0-2.el9ap	17.10.2025	SB2025101702 SB2025101703 SB2025101704 and 22 more
#VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59682	CWE-22	Medium	No	No	25.8.0-2.el9ap	03.10.2025	SB2025100337 SB2025100340 SB2025100647 and 14 more
#VU114764 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-57833	CWE-89	High	Available	No	25.8.0-1.el8ap, 25.8.0-1.el9ap	03.09.2025	SB2025090342 SB2025090433 SB2025090469 and 19 more
#VU110203 - Improper input validation CVE-2025-48432	CWE-20	Medium	No	No	25.8.0-1.el8ap, 25.8.0-1.el9ap	04.06.2025	SB2025060452 SB2025060831 SB2025060832 and 18 more
#VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871	CWE-444	Medium	No	No	25.5.0-1.el8ap, 25.5.0-1.el9ap	05.04.2025	SB2025040507 SB2025040508 SB2025040739 and 109 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26791	CWE-79	Low	No	No	25.1.0-1.el8ap, 25.1.0-1.el9ap	17.03.2025	SB2025031740 SB2025031741 SB2025031771 and 35 more
#VU54626 - Improper Control of Generation of Code ('Code Injection') CVE-2021-3583	CWE-94	High	No	No	1.0.0-2.el8ap	08.07.2021	SB2021070822 SB2021070823 SB2021071517 and 12 more

Showing elements 21 - 40 out of 27