Known vulnerabilities in python3.12-django-ansible-base (Red Hat package)
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:python3_12-django-ansible-base_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
11
Public exploits:
1
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (11)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU124772 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2026-22029 |
CWE-79 | Low | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 01.04.2026 |
SB2026040154 SB2026040164 SB2026041309 and 10 more |
||
| #VU124034 - Resource exhaustion CVE-2025-61726 |
CWE-400 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap, 2024.1.31-4.el8ap, 2024.1.31-4.el9ap | 16.03.2026 |
SB2026031636 SB2026031637 SB2026031638 and 145 more |
||
| #VU123116 - Uncontrolled Recursion CVE-2026-0994 |
CWE-674 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 20.02.2026 |
SB2026022039 SB2026022040 SB2026022041 and 28 more |
||
| #VU122270 - Resource exhaustion CVE-2026-23490 |
CWE-400 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 03.02.2026 |
SB2026020365 SB2026020366 SB2026020370 and 53 more |
||
| #VU122261 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1312 |
CWE-89 | High | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 15 more |
||
| #VU122260 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1287 |
CWE-89 | High | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 14 more |
||
| #VU122259 - Resource exhaustion CVE-2026-1285 |
CWE-400 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 15 more |
||
| #VU122258 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2026-1207 |
CWE-89 | High | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 15 more |
||
| #VU122257 - Resource exhaustion CVE-2025-14550 |
CWE-400 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 03.02.2026 |
SB2026020349 SB2026020378 SB2026020686 and 14 more |
||
| #VU121929 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2026-24049 |
CWE-22 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 22.01.2026 |
SB2026012210 SB2026012503 SB2026012761 and 21 more |
||
| #VU120990 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2025-69223 |
CWE-409 | Medium | 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap | 06.01.2026 |
SB2026010643 SB2026012661 SB2026012855 and 15 more |