Cross-site scripting in React Router - CVE-2026-22029

Vulnerability identifier: #VU124772

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N]

CVE-ID: CVE-2026-22029

CWE-ID: CWE-79

Exploitation vector: Remote access

Exploit availability: No public exploit available

The disclosed vulnerability allows a remote attacker to perform cross-site scripting (XSS) attacks.

The vulnerability exists due to insufficient sanitization of user-supplied data. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in context of vulnerable website.

Successful exploitation of this vulnerability may allow a remote attacker to steal potentially sensitive information, change appearance of the web page, perform phishing and drive-by-download attacks.

React Router
Storage Sentinel Anomaly Scan Engine
Rational Performance Tester
DevOps Test Performance
Data Cataloging
IBM Fusion HCI
Crowd Data Center
Confluence Data Center
Jira Software Data Center
Jira Service Management Data Center
Ansible Automation Platform
ansible-sign (Red Hat package)
python3.12-rfc3339-validator (Red Hat package)
python3.12-ruamel-yaml-clib (Red Hat package)
python3.12-nh3 (Red Hat package)
python3.12-pyasn1-modules (Red Hat package)
python3.12-insights-analytics-collector (Red Hat package)
python3.12-jsonschema-path (Red Hat package)
python3.12-drools-jpy (Red Hat package)
python3.12-distlib (Red Hat package)
python3.12-propcache (Red Hat package)
python3.12-subprocess-tee (Red Hat package)
python3.12-pathable (Red Hat package)
python3.12-colorama (Red Hat package)
python3.12-json-stream-rs-tokenizer (Red Hat package)
python3.12-galaxy-importer (Red Hat package)
python3.12-pyasn1 (Red Hat package)
python3.12-inflection (Red Hat package)
python3.12-gnupg (Red Hat package)
python3.12-sqlparse (Red Hat package)
aap-metrics-utility (Red Hat package)
python3.12-isodate (Red Hat package)
python3.12-openapi-schema-validator (Red Hat package)
python3.12-ptyprocess (Red Hat package)
python3.12-mccabe (Red Hat package)
python3.12-openapi-spec-validator (Red Hat package)
python3.12-defusedxml (Red Hat package)
python3.12-django-crum (Red Hat package)
python3.12-pytest-plus (Red Hat package)
python3.12-tabulate (Red Hat package)
python3.12-commonmark (Red Hat package)
python3.12-click-help-colors (Red Hat package)
python3.12-s3transfer (Red Hat package)
python3.12-pathspec (Red Hat package)
python3.12-lockfile (Red Hat package)
python3.12-rq-scheduler (Red Hat package)
python3.12-jpy (Red Hat package)
python3.12-ecdsa (Red Hat package)
python3.12-rpds-py (Red Hat package)
python3.12-ruamel-yaml (Red Hat package)
python3.12-prometheus-client (Red Hat package)
python3.12-openapi-core (Red Hat package)
python3.12-pulp-glue (Red Hat package)
python3.12-pulp-ansible (Red Hat package)
python3.12-drf-spectacular (Red Hat package)
python3.12-validators (Red Hat package)
python3.12-referencing (Red Hat package)
python3.12-wheel (Red Hat package)
python3.12-drf-nested-routers (Red Hat package)
python3.12-mypy-extensions (Red Hat package)
python3.12-janus (Red Hat package)
python3.12-ansible-sdk (Red Hat package)
python3.12-ldap-filter (Red Hat package)
python3.12-resolvelib (Red Hat package)
python3.12-jmespath (Red Hat package)
python3.12-asyncio-throttle (Red Hat package)
python3.12-persisting-theory (Red Hat package)
python3.12-crontab (Red Hat package)
automation-controller-fapolicyd (Red Hat package)
python3.12-djangorestframework-queryfields (Red Hat package)
python3.12-et-xmlfile (Red Hat package)
python3.12-pytest-sugar (Red Hat package)
python3.12-django-lifecycle (Red Hat package)
ansible-rulebook (Red Hat package)
automation-eda-controller (Red Hat package)
python3.12-brotli (Red Hat package)
python3.12-django-split-settings (Red Hat package)
python3.12-netaddr (Red Hat package)
python3.12-ansible-pylibssh (Red Hat package)
python3.12-enrich (Red Hat package)
python3.12-deprecated (Red Hat package)
python3.12-onigurumacffi (Red Hat package)
python3.12-xlwt (Red Hat package)
python3.12-requests-oauthlib (Red Hat package)
python3.12-parsley (Red Hat package)
python3.12-xmlsec (Red Hat package)
python3.12-aiosignal (Red Hat package)
python3.12-frozenlist (Red Hat package)
python3.12-odfpy (Red Hat package)
python3.12-url-normalize (Red Hat package)
python3.12-drf-access-policy (Red Hat package)
python3.12-freezegun (Red Hat package)
python3.12-jwcrypto (Red Hat package)
python3.12-jq (Red Hat package)
python3.12-pluggy (Red Hat package)
python3.12-pyproject-api (Red Hat package)
receptor (Red Hat package)
python3.12-uamqp (Red Hat package)
python3.12-websocket-client (Red Hat package)
python3.12-distro (Red Hat package)
python3.12-lazy-object-proxy (Red Hat package)
python3.12-pydantic (Red Hat package)
python3.12-django-storages (Red Hat package)
python3.12-markuppy (Red Hat package)
python3.12-wrapt (Red Hat package)
python3.12-django-dynamic-preferences (Red Hat package)
python3.12-python3-saml (Red Hat package)
python3.12-six (Red Hat package)
python3.12-yarl (Red Hat package)
python3.12-parse (Red Hat package)
python3.12-opentelemetry (Red Hat package)
python3.12-opentelemetry-contrib (Red Hat package)
python3.12-azure-core (Red Hat package)
python3.12-boto3 (Red Hat package)
python3.12-botocore (Red Hat package)
yamllint (Red Hat package)
python3.12-grpcio (Red Hat package)
python3.12-xds-protos (Red Hat package)
python3.12-googleapis-common-protos (Red Hat package)
python3.12-iniconfig (Red Hat package)
pulpcore-selinux (Red Hat package)
python3.12-croniter (Red Hat package)
python3.12-xlrd (Red Hat package)
python3.12-async-lru (Red Hat package)
uwsgi (Red Hat package)
python3.12-execnet (Red Hat package)
python3.12-markupsafe (Red Hat package)
python3.12-dpath (Red Hat package)
python3.12-backoff (Red Hat package)
python3.12-django-oauth-toolkit (Red Hat package)
python3.12-django-prometheus (Red Hat package)
python3.12-json-stream (Red Hat package)
python3.12-bracex (Red Hat package)
ansible-runner (Red Hat package)
python3.12-pyrad (Red Hat package)
python3.12-pygtrie (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python3.12-django-ansible-base (Red Hat package)
automation-gateway (Red Hat package)
python3.12-aiohappyeyeballs (Red Hat package)
python3.12-rq (Red Hat package)
python3.12-tacacs-plus (Red Hat package)
python3.12-urllib3 (Red Hat package)
python3.12-pyjwt (Red Hat package)
python3.12-dateutil (Red Hat package)
python3.12-semantic-version (Red Hat package)
python3.12-pycodestyle (Red Hat package)
bindep (Red Hat package)
ansible-core (Red Hat package)
python3.12-pygments (Red Hat package)
python3.12-pulp-container (Red Hat package)
python3.12-google-auth (Red Hat package)
python3.12-requests (Red Hat package)
python3.12-werkzeug (Red Hat package)
python3.12-django-ipware (Red Hat package)
python3.12-termcolor (Red Hat package)
python3.12-pyflakes (Red Hat package)
ansible-builder (Red Hat package)
python3.12-pyparsing (Red Hat package)
python3.12-django-picklefield (Red Hat package)
python3.12-openpyxl (Red Hat package)
python3.12-daemon (Red Hat package)
python3.12-jinja2 (Red Hat package)
python3.12-gitpython (Red Hat package)
python3.12-aiodns (Red Hat package)
python3.12-python3-openid (Red Hat package)
python3.12-django-rq (Red Hat package)
python3.12-oauthlib (Red Hat package)
python3.12-psycopg (Red Hat package)
python3.12-dynaconf (Red Hat package)
python3.12-django-import-export (Red Hat package)
python3.12-django-guid (Red Hat package)
python3.12-xxhash (Red Hat package)
python3.12-ldap (Red Hat package)
python3.12-tablib (Red Hat package)
python3.12-markdown (Red Hat package)
python3.12-asgiref (Red Hat package)
python3.12-pytest-xdist (Red Hat package)
python3.12-filelock (Red Hat package)
python3.12-aiohttp (Red Hat package)
python3.12-djangorestframework (Red Hat package)
python3.12-zipp (Red Hat package)
python3.12-marshmallow (Red Hat package)
python3.12-pulpcore (Red Hat package)
python3.12-django-auth-ldap (Red Hat package)
python3.12-daphne (Red Hat package)
python3.12-channels (Red Hat package)
python3.12-gitdb (Red Hat package)
python3.12-uritemplate (Red Hat package)
python3.12-django-extensions (Red Hat package)
python3.12-platformdirs (Red Hat package)
supervisor (Red Hat package)
python3.12-django (Red Hat package)
python3.12-pycares (Red Hat package)
python3.12-social-auth-core (Red Hat package)
python3.12-redis (Red Hat package)
automation-controller (Red Hat package)
python3.12-pexpect (Red Hat package)
python3.12-rsa (Red Hat package)
automation-hub (Red Hat package)
python3.12-galaxy-ng (Red Hat package)
python3.12-typing-extensions (Red Hat package)
python3.12-tox (Red Hat package)
python3.12-jsonschema (Red Hat package)
python3.12-smmap (Red Hat package)
python3.12-watchdog (Red Hat package)
python3.12-django-flags (Red Hat package)
python3.12-chardet (Red Hat package)
python3.12-lxml (Red Hat package)
python3.12-cachetools (Red Hat package)
python3.12-podman (Red Hat package)
python3.12-django-redis (Red Hat package)
python3.12-social-auth-app-django (Red Hat package)
python3.12-protobuf (Red Hat package)
python3.12-pbr (Red Hat package)
python3.12-importlib-metadata (Red Hat package)
python3.12-multidict (Red Hat package)
python3.12-flake8 (Red Hat package)
python3.12-zope-interface (Red Hat package)
python3.12-whitenoise (Red Hat package)
python3.12-click (Red Hat package)
python3.12-wcmatch (Red Hat package)
python3.12-pytest (Red Hat package)
python3.12-more-itertools (Red Hat package)
python3.12-pillow (Red Hat package)
python3.12-pillow-debugsource (Red Hat package)
python3.12-azure-storage-blob (Red Hat package)
python3.12-rich (Red Hat package)
python3.12-websockets (Red Hat package)
python3.12-virtualenv (Red Hat package)
python3.12-hyperlink (Red Hat package)
python3.12-service-identity (Red Hat package)
python3.12-argon2-cffi-bindings (Red Hat package)
python3.12-attrs (Red Hat package)
python3.12-Automat (Red Hat package)
python3.12-gunicorn (Red Hat package)
python3.12-argon2-cffi (Red Hat package)
python3.12-txaio (Red Hat package)
python3.12-aiofiles (Red Hat package)
python3.12-packaging (Red Hat package)
python3.12-django-filter (Red Hat package)
python3.12-constantly (Red Hat package)
python3.12-pyOpenSSL (Red Hat package)
python3.12-autobahn (Red Hat package)
python3.12-black (Red Hat package)
python3.12-twisted (Red Hat package)
python3.12-incremental (Red Hat package)
ansible-creator (Red Hat package)
python3.12-pytest-ansible (Red Hat package)
molecule (Red Hat package)
python3.12-tox-ansible (Red Hat package)
python3.12-ansible-compat (Red Hat package)
ansible-dev-environment (Red Hat package)
ansible-dev-tools (Red Hat package)
ansible-lint (Red Hat package)
python3.12-kubernetes (Red Hat package)
ansible-navigator (Red Hat package)
python3.12-cryptography (Red Hat package)
python3.12-setuptools (Red Hat package)
python3.12-certifi (Red Hat package)
python3.12-jsonschema-specifications (Red Hat package)
python3.12-pytz (Red Hat package)
python3.12-uuid6 (Red Hat package)
python3.12-dispatcherd (Red Hat package)
python3.12-diff-match-patch (Red Hat package)
Red Hat OpenShift Container Platform
OpenShift Data Foundation (formerly OpenShift Container Storage)

Install updates from vendor's website.

React Router - update to 7.12.0
Storage Sentinel Anomaly Scan Engine - update to 2.3.0
IBM Fusion HCI - update to 2.13.0
Crowd Data Center - update to 7.1.5
Confluence Data Center - addressed in versions 9.2.19, 10.2.10
Jira Software Data Center - addressed in versions 10.3.20, 11.3.5
Jira Service Management Data Center - addressed in versions 10.3.20, 11.3.5
DevOps Test Performance - update to 11.0.8
ansible-sign (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-rfc3339-validator (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-ruamel-yaml-clib (Red Hat package) - addressed in versions 0.2.15-2.el8ap, 0.2.15-2.el9ap
python3.12-nh3 (Red Hat package) - addressed in versions 0.2.18-2.el8ap, 0.2.18-2.el9ap
python3.12-pyasn1-modules (Red Hat package) - addressed in versions 0.3.0-2.el8ap, 0.3.0-2.el9ap
python3.12-insights-analytics-collector (Red Hat package) - addressed in versions 0.3.2-3.el8ap, 0.3.2-3.el9ap
python3.12-jsonschema-path (Red Hat package) - addressed in versions 0.3.4-2.el8ap, 0.3.4-2.el9ap
python3.12-drools-jpy (Red Hat package) - addressed in versions 0.3.10-2.el8ap, 0.3.10-2.el9ap
python3.12-distlib (Red Hat package) - addressed in versions 0.4.0-2.el8ap, 0.4.0-2.el9ap
python3.12-propcache (Red Hat package) - addressed in versions 0.4.1-1.el8ap, 0.4.1-1.el9ap
python3.12-subprocess-tee (Red Hat package) - addressed in versions 0.4.2-2.el8ap, 0.4.2-2.el9ap
python3.12-pathable (Red Hat package) - addressed in versions 0.4.3-2.el8ap, 0.4.3-2.el9ap
python3.12-colorama (Red Hat package) - addressed in versions 0.4.6-2.el8ap, 0.4.6-2.el9ap
python3.12-json-stream-rs-tokenizer (Red Hat package) - addressed in versions 0.4.26-2.el8ap, 0.4.26-2.el9ap
python3.12-galaxy-importer (Red Hat package) - addressed in versions 0.4.37-3.el8ap, 0.4.37-3.el9ap
python3.12-pyasn1 (Red Hat package) - addressed in versions 0.5.1-2.el8ap, 0.5.1-2.el9ap
python3.12-inflection (Red Hat package) - addressed in versions 0.5.1-5.el8ap, 0.5.1-5.el9ap
python3.12-gnupg (Red Hat package) - addressed in versions 0.5.2-2.el8ap, 0.5.2-2.el9ap
python3.12-sqlparse (Red Hat package) - addressed in versions 0.5.3-3.el8ap, 0.5.3-3.el9ap
aap-metrics-utility (Red Hat package) - addressed in versions 0.6.0-2.1.el8ap, 0.6.0-2.1.el9ap
python3.12-isodate (Red Hat package) - addressed in versions 0.6.1-3.el8ap, 0.6.1-3.el9ap
python3.12-openapi-schema-validator (Red Hat package) - addressed in versions 0.6.2-2.el8ap, 0.6.2-2.el9ap
python3.12-ptyprocess (Red Hat package) - addressed in versions 0.7.0-2.el8ap, 0.7.0-2.el9ap
python3.12-mccabe (Red Hat package) - addressed in versions 0.7.0-3.el8ap, 0.7.0-3.el9ap
python3.12-openapi-spec-validator (Red Hat package) - addressed in versions 0.7.1-2.el8ap, 0.7.1-2.el9ap
python3.12-defusedxml (Red Hat package) - addressed in versions 0.7.1-5.el8ap, 0.7.1-5.el9ap
python3.12-django-crum (Red Hat package) - addressed in versions 0.7.9-3.el8ap, 0.7.9-3.el9ap
python3.12-pytest-plus (Red Hat package) - addressed in versions 0.8.1-2.el8ap, 0.8.1-2.el9ap
python3.12-tabulate (Red Hat package) - addressed in versions 0.9.0-4.el8ap, 0.9.0-4.el9ap
python3.12-commonmark (Red Hat package) - addressed in versions 0.9.1-7.el8ap, 0.9.1-7.el9ap
python3.12-click-help-colors (Red Hat package) - addressed in versions 0.9.4-2.el8ap, 0.9.4-2.el9ap
python3.12-s3transfer (Red Hat package) - addressed in versions 0.10.0-2.el8ap, 0.10.0-2.el9ap
python3.12-pathspec (Red Hat package) - addressed in versions 0.12.1-2.el8ap, 0.12.1-2.el9ap
python3.12-lockfile (Red Hat package) - addressed in versions 0.12.2-3.el8ap, 0.12.2-3.el9ap
python3.12-rq-scheduler (Red Hat package) - addressed in versions 0.14.0-1.el8ap, 0.14.0-1.el9ap
python3.12-jpy (Red Hat package) - addressed in versions 0.15.0-2.el8ap, 0.15.0-2.el9ap
python3.12-ecdsa (Red Hat package) - addressed in versions 0.18.0-2.el8ap, 0.18.0-2.el9ap
python3.12-rpds-py (Red Hat package) - addressed in versions 0.18.1-3.el8ap, 0.18.1-3.el9ap
python3.12-ruamel-yaml (Red Hat package) - addressed in versions 0.18.15-2.el8ap, 0.18.15-2.el9ap
python3.12-prometheus-client (Red Hat package) - addressed in versions 0.19.0-2.el8ap, 0.19.0-2.el9ap
python3.12-openapi-core (Red Hat package) - addressed in versions 0.19.1-2.el8ap, 0.19.1-2.el9ap
python3.12-pulp-glue (Red Hat package) - addressed in versions 0.23.2-2.el8ap, 0.23.2-2.el9ap
python3.12-pulp-ansible (Red Hat package) - addressed in versions 0.25.1-2.el8ap, 0.25.1-2.el9ap
python3.12-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-3.el8ap, 0.26.5-3.el9ap
python3.12-validators (Red Hat package) - addressed in versions 0.34.0-2.el8ap, 0.34.0-2.el9ap
python3.12-referencing (Red Hat package) - addressed in versions 0.36.2-3.el8ap, 0.36.2-3.el9ap
python3.12-wheel (Red Hat package) - update to 0.41.2-4.el8_10
python3.12-drf-nested-routers (Red Hat package) - addressed in versions 0.93.5-2.el8ap, 0.93.5-2.el9ap
python3.12-mypy-extensions (Red Hat package) - addressed in versions 1.0.0-2.el8ap, 1.0.0-2.el9ap
python3.12-janus (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-ansible-sdk (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-ldap-filter (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-resolvelib (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-jmespath (Red Hat package) - addressed in versions 1.0.1-3.el8ap, 1.0.1-3.el9ap
python3.12-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-5.el8ap, 1.0.2-5.el9ap
python3.12-persisting-theory (Red Hat package) - addressed in versions 1.0-3.el8ap, 1.0-3.el9ap
python3.12-crontab (Red Hat package) - addressed in versions 1.0.5-1.el8ap, 1.0.5-1.el9ap
automation-controller-fapolicyd (Red Hat package) - addressed in versions 1.0-6.el8ap, 1.0-6.el9ap
python3.12-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.1.0-2.el8ap, 1.1.0-2.el9ap
python3.12-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-4.el8ap, 1.1.0-4.el9ap
python3.12-pytest-sugar (Red Hat package) - addressed in versions 1.1.1-2.el8ap, 1.1.1-2.el9ap
python3.12-django-lifecycle (Red Hat package) - addressed in versions 1.1.2-2.el8ap, 1.1.2-2.el9ap
ansible-rulebook (Red Hat package) - addressed in versions 1.1.7-2.el8ap, 1.1.7-2.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.1.16-1.el8ap, 1.1.16-1.el9ap
python3.12-brotli (Red Hat package) - addressed in versions 1.2.0-1.el8ap, 1.2.0-1.el9ap
python3.12-django-split-settings (Red Hat package) - addressed in versions 1.2.0-3.el8ap, 1.2.0-3.el9ap
python3.12-netaddr (Red Hat package) - addressed in versions 1.2.1-2.el8ap, 1.2.1-2.el9ap
python3.12-ansible-pylibssh (Red Hat package) - addressed in versions 1.2.2-2.el8ap, 1.2.2-2.el9ap
python3.12-enrich (Red Hat package) - addressed in versions 1.2.7-3.el8ap, 1.2.7-3.el9ap
python3.12-deprecated (Red Hat package) - addressed in versions 1.2.14-2.el8ap, 1.2.14-2.el9ap
python3.12-onigurumacffi (Red Hat package) - addressed in versions 1.3.0-2.el8ap, 1.3.0-2.el9ap
python3.12-xlwt (Red Hat package) - addressed in versions 1.3.0-5.el8ap, 1.3.0-5.el9ap
python3.12-requests-oauthlib (Red Hat package) - addressed in versions 1.3.1-2.el8ap, 1.3.1-2.el9ap
python3.12-parsley (Red Hat package) - addressed in versions 1.3-4.el8ap, 1.3-4.el9ap
python3.12-xmlsec (Red Hat package) - addressed in versions 1.3.13-3.el8ap, 1.3.13-3.el9ap
python3.12-aiosignal (Red Hat package) - addressed in versions 1.4.0-1.el8ap, 1.4.0-1.el9ap
python3.12-frozenlist (Red Hat package) - addressed in versions 1.4.0-2.el8ap, 1.4.0-2.el9ap
python3.12-odfpy (Red Hat package) - addressed in versions 1.4.1-9.el8ap, 1.4.1-9.el9ap
python3.12-url-normalize (Red Hat package) - addressed in versions 1.4.3-6.el8ap, 1.4.3-6.el9ap
python3.12-drf-access-policy (Red Hat package) - addressed in versions 1.5.0-2.el8ap, 1.5.0-2.el9ap
python3.12-freezegun (Red Hat package) - addressed in versions 1.5.5-1.el8ap, 1.5.5-1.el9ap
python3.12-jwcrypto (Red Hat package) - addressed in versions 1.5.6-2.el8ap, 1.5.6-2.el9ap
python3.12-jq (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pluggy (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pyproject-api (Red Hat package) - addressed in versions 1.6.1-2.el8ap, 1.6.1-2.el9ap
receptor (Red Hat package) - addressed in versions 1.6.3-4.el8ap, 1.6.3-4.el9ap
python3.12-uamqp (Red Hat package) - addressed in versions 1.6.8-2.el8ap, 1.6.8-2.el9ap
python3.12-websocket-client (Red Hat package) - addressed in versions 1.7.0-3.el8ap, 1.7.0-3.el9ap
python3.12-distro (Red Hat package) - addressed in versions 1.9.0-2.el8ap, 1.9.0-2.el9ap
python3.12-lazy-object-proxy (Red Hat package) - addressed in versions 1.10.0-2.el8ap, 1.10.0-2.el9ap
python3.12-pydantic (Red Hat package) - addressed in versions 1.10.15-2.el8ap, 1.10.15-2.el9ap
python3.12-django-storages (Red Hat package) - update to 1.14.2-3.el8ap
python3.12-markuppy (Red Hat package) - addressed in versions 1.14-5.el8ap, 1.14-5.el9ap
python3.12-wrapt (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-django-dynamic-preferences (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-python3-saml (Red Hat package) - addressed in versions 1.16.0-3.el8ap, 1.16.0-3.el9ap
python3.12-six (Red Hat package) - addressed in versions 1.17.0-1.el8ap, 1.17.0-1.el9ap
python3.12-yarl (Red Hat package) - addressed in versions 1.18.3-1.el8ap, 1.18.3-1.el9ap
python3.12-parse (Red Hat package) - addressed in versions 1.20.1-2.el8ap, 1.20.1-2.el9ap
python3.12-opentelemetry (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-opentelemetry-contrib (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-azure-core (Red Hat package) - addressed in versions 1.34.0-2.el8ap, 1.34.0-2.el9ap
python3.12-boto3 (Red Hat package) - addressed in versions 1.34.30-2.el8ap, 1.34.30-2.el9ap
python3.12-botocore (Red Hat package) - addressed in versions 1.34.162-2.el8ap, 1.34.162-2.el9ap
yamllint (Red Hat package) - addressed in versions 1.35.1-2.el8ap, 1.35.1-2.el9ap
python3.12-grpcio (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-xds-protos (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-googleapis-common-protos (Red Hat package) - addressed in versions 1.72.0-1.el8ap, 1.72.0-1.el9ap
python3.12-iniconfig (Red Hat package) - addressed in versions 2.0.0-2.el8ap, 2.0.0-2.el9ap
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-croniter (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-xlrd (Red Hat package) - addressed in versions 2.0.1-7.el8ap, 2.0.1-7.el9ap
python3.12-async-lru (Red Hat package) - addressed in versions 2.0.5-1.el8ap, 2.0.5-1.el9ap
uwsgi (Red Hat package) - addressed in versions 2.0.28-2.el8ap, 2.0.28-2.el9ap
python3.12-execnet (Red Hat package) - addressed in versions 2.1.2-2.el8ap, 2.1.2-2.el9ap
python3.12-markupsafe (Red Hat package) - addressed in versions 2.1.5-2.el8ap, 2.1.5-2.el9ap
python3.12-dpath (Red Hat package) - addressed in versions 2.1.6-2.el8ap, 2.1.6-2.el9ap
python3.12-backoff (Red Hat package) - addressed in versions 2.2.1-2.el8ap, 2.2.1-2.el9ap
python3.12-django-oauth-toolkit (Red Hat package) - addressed in versions 2.3.0-2.el8ap, 2.3.0-2.el9ap
python3.12-django-prometheus (Red Hat package) - addressed in versions 2.3.1-3.el8ap, 2.3.1-3.el9ap
python3.12-json-stream (Red Hat package) - addressed in versions 2.3.2-2.el8ap, 2.3.2-2.el9ap
python3.12-bracex (Red Hat package) - addressed in versions 2.4-2.el8ap, 2.4-2.el9ap
ansible-runner (Red Hat package) - addressed in versions 2.4.2-3.el8ap, 2.4.2-3.el9ap
python3.12-pyrad (Red Hat package) - addressed in versions 2.4-3.el8ap, 2.4-3.el9ap
Ansible Automation Platform - addressed in versions 2.5, 2.6
python3.12-pygtrie (Red Hat package) - addressed in versions 2.5.0-3.el8ap, 2.5.0-3.el9ap
Data Cataloging - update to 2.5.3
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.5-21.el8ap, 2.5-21.el9ap
python3.12-django-ansible-base (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
python3.12-aiohappyeyeballs (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-rq (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-tacacs-plus (Red Hat package) - addressed in versions 2.6-3.el8ap, 2.6-3.el9ap
python3.12-urllib3 (Red Hat package) - addressed in versions 2.6.3-2.el8ap, 2.6.3-2.el9ap
python3.12-pyjwt (Red Hat package) - addressed in versions 2.7.0-3.el8ap, 2.7.0-3.el9ap
python3.12-dateutil (Red Hat package) - addressed in versions 2.8.2-3.el8ap, 2.8.2-3.el9ap
python3.12-semantic-version (Red Hat package) - addressed in versions 2.10.0-3.el8ap, 2.10.0-3.el9ap
python3.12-pycodestyle (Red Hat package) - addressed in versions 2.11.1-2.el8ap, 2.11.1-2.el9ap
bindep (Red Hat package) - addressed in versions 2.13.0-2.el8ap, 2.13.0-2.el9ap
ansible-core (Red Hat package) - addressed in versions 2.16.16-1.el8ap, 2.16.16-1.el9ap
python3.12-pygments (Red Hat package) - addressed in versions 2.17.2-3.el8ap, 2.17.2-3.el9ap
python3.12-pulp-container (Red Hat package) - addressed in versions 2.19.3-2.el8ap, 2.19.3-2.el9ap
python3.12-google-auth (Red Hat package) - addressed in versions 2.27.0-2.el8ap, 2.27.0-2.el9ap
python3.12-requests (Red Hat package) - addressed in versions 2.31.0-4.el8ap, 2.31.0-4.el9ap
python3.12-werkzeug (Red Hat package) - addressed in versions 3.0.3-2.el8ap, 3.0.3-2.el9ap
python3.12-django-ipware (Red Hat package) - addressed in versions 3.0.7-4.el8ap, 3.0.7-4.el9ap
python3.12-termcolor (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
python3.12-pyflakes (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
ansible-builder (Red Hat package) - addressed in versions 3.1.1-1.2.el8ap, 3.1.1-1.2.el9ap
python3.12-pyparsing (Red Hat package) - addressed in versions 3.1.1-2.el8ap, 3.1.1-2.el9ap
python3.12-django-picklefield (Red Hat package) - addressed in versions 3.1-2.el8ap, 3.1-2.el9ap
python3.12-openpyxl (Red Hat package) - addressed in versions 3.1.2-2.el8ap, 3.1.2-2.el9ap
python3.12-daemon (Red Hat package) - addressed in versions 3.1.2-3.el8ap, 3.1.2-3.el9ap
python3.12-jinja2 (Red Hat package) - addressed in versions 3.1.6-2.el8ap, 3.1.6-2.el9ap
python3.12-gitpython (Red Hat package) - addressed in versions 3.1.41-2.el8ap, 3.1.41-2.el9ap
python3.12-aiodns (Red Hat package) - addressed in versions 3.2.0-2.el8ap, 3.2.0-2.el9ap
python3.12-python3-openid (Red Hat package) - addressed in versions 3.2.0-4.el8ap, 3.2.0-4.el9ap
python3.12-django-rq (Red Hat package) - addressed in versions 3.2.2-1.el8ap, 3.2.2-1.el9ap
python3.12-oauthlib (Red Hat package) - addressed in versions 3.2.2-2.el8ap, 3.2.2-2.el9ap
python3.12-psycopg (Red Hat package) - addressed in versions 3.2.7-2.el8ap, 3.2.7-2.el9ap
python3.12-dynaconf (Red Hat package) - addressed in versions 3.2.11-2.el8ap, 3.2.11-2.el9ap
python3.12-django-import-export (Red Hat package) - addressed in versions 3.3.6-3.el8ap, 3.3.6-3.el9ap
python3.12-django-guid (Red Hat package) - addressed in versions 3.4.0-2.el8ap, 3.4.0-2.el9ap
python3.12-xxhash (Red Hat package) - addressed in versions 3.4.1-2.el8ap, 3.4.1-2.el9ap
python3.12-ldap (Red Hat package) - addressed in versions 3.4.5-1.el8ap, 3.4.5-1.el9ap
python3.12-tablib (Red Hat package) - addressed in versions 3.5.0-2.el8ap, 3.5.0-2.el9ap
python3.12-markdown (Red Hat package) - addressed in versions 3.5.2-2.el8ap, 3.5.2-2.el9ap
python3.12-asgiref (Red Hat package) - addressed in versions 3.7.2-2.el8ap, 3.7.2-2.el9ap
python3.12-pytest-xdist (Red Hat package) - addressed in versions 3.8.0-2.el8ap, 3.8.0-2.el9ap
python3.12-filelock (Red Hat package) - addressed in versions 3.13.1-2.el8ap, 3.13.1-2.el9ap
python3.12-aiohttp (Red Hat package) - addressed in versions 3.13.3-2.el8ap, 3.13.3-2.el9ap
python3.12-djangorestframework (Red Hat package) - addressed in versions 3.15.1-2.el8ap, 3.15.1-2.el9ap
python3.12-zipp (Red Hat package) - addressed in versions 3.19.2-2.el8ap, 3.19.2-2.el9ap
python3.12-marshmallow (Red Hat package) - addressed in versions 3.26.2-1.el8ap, 3.26.2-1.el9ap
python3.12-pulpcore (Red Hat package) - addressed in versions 3.49.50-1.el8ap, 3.49.50-1.el9ap
python3.12-django-auth-ldap (Red Hat package) - addressed in versions 4.0.0-3.el8ap, 4.0.0-3.el9ap
python3.12-daphne (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-channels (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-gitdb (Red Hat package) - addressed in versions 4.0.11-2.el8ap, 4.0.11-2.el9ap
python3.12-uritemplate (Red Hat package) - addressed in versions 4.1.1-4.el8ap, 4.1.1-4.el9ap
python3.12-django-extensions (Red Hat package) - addressed in versions 4.1-2.el8ap, 4.1-2.el9ap
python3.12-platformdirs (Red Hat package) - addressed in versions 4.2.0-2.el8ap, 4.2.0-2.el9ap
supervisor (Red Hat package) - addressed in versions 4.2.5-2.el8ap, 4.2.5-2.el9ap
python3.12-django (Red Hat package) - addressed in versions 4.2.28-1.el8ap, 4.2.28-1.el9ap
python3.12-pycares (Red Hat package) - addressed in versions 4.4.0-3.el8ap, 4.4.0-3.el9ap
python3.12-social-auth-core (Red Hat package) - addressed in versions 4.5.4-2.el8ap, 4.5.4-2.el9ap
python3.12-redis (Red Hat package) - addressed in versions 4.6.0-3.el8ap, 4.6.0-3.el9ap
automation-controller (Red Hat package) - addressed in versions 4.6.26-1.el8ap, 4.6.26-1.el9ap
python3.12-pexpect (Red Hat package) - addressed in versions 4.9.0-2.el8ap, 4.9.0-2.el9ap
python3.12-rsa (Red Hat package) - addressed in versions 4.9-3.el8ap, 4.9-3.el9ap
automation-hub (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
python3.12-galaxy-ng (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
python3.12-typing-extensions (Red Hat package) - addressed in versions 4.15.0-2.el8ap, 4.15.0-2.el9ap
python3.12-tox (Red Hat package) - addressed in versions 4.15.1-2.el8ap, 4.15.1-2.el9ap
Red Hat OpenShift Container Platform - update to 4.17.55
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4.18.24, 4.19.19
python3.12-jsonschema (Red Hat package) - addressed in versions 4.21.1-2.el8ap, 4.21.1-2.el9ap
python3.12-smmap (Red Hat package) - addressed in versions 5.0.1-2.el8ap, 5.0.1-2.el9ap
python3.12-watchdog (Red Hat package) - addressed in versions 5.0.2-2.el8ap, 5.0.2-2.el9ap
python3.12-django-flags (Red Hat package) - addressed in versions 5.0.13-2.el8ap, 5.0.13-2.el9ap
python3.12-chardet (Red Hat package) - addressed in versions 5.2.0-3.el8ap, 5.2.0-3.el9ap
python3.12-lxml (Red Hat package) - addressed in versions 5.3.0-2.el8ap, 5.3.0-2.el9ap
python3.12-cachetools (Red Hat package) - addressed in versions 5.3.2-2.el8ap, 5.3.2-2.el9ap
python3.12-podman (Red Hat package) - addressed in versions 5.4.0.1-2.el8ap, 5.4.0.1-2.el9ap
python3.12-django-redis (Red Hat package) - addressed in versions 5.4.0-2.el8ap, 5.4.0-2.el9ap
python3.12-social-auth-app-django (Red Hat package) - addressed in versions 5.4.1-2.el8ap, 5.4.1-2.el9ap
python3.12-protobuf (Red Hat package) - addressed in versions 5.29.6-1.el8ap, 5.29.6-1.el9ap
python3.12-pbr (Red Hat package) - addressed in versions 6.0.0-3.el8ap, 6.0.0-3.el9ap
python3.12-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-3.el8ap, 6.0.1-3.el9ap
python3.12-multidict (Red Hat package) - addressed in versions 6.0.4-2.el8ap, 6.0.4-2.el9ap
python3.12-flake8 (Red Hat package) - addressed in versions 6.1.0-3.el8ap, 6.1.0-3.el9ap
python3.12-zope-interface (Red Hat package) - addressed in versions 6.1-2.el8ap, 6.1-2.el9ap
python3.12-whitenoise (Red Hat package) - addressed in versions 6.6.0-2.el8ap, 6.6.0-2.el9ap
python3.12-click (Red Hat package) - addressed in versions 8.1.7-2.el8ap, 8.1.7-2.el9ap
python3.12-wcmatch (Red Hat package) - addressed in versions 8.5-2.el8ap, 8.5-2.el9ap
python3.12-pytest (Red Hat package) - addressed in versions 9.0.1-2.el8ap, 9.0.1-2.el9ap
python3.12-more-itertools (Red Hat package) - addressed in versions 10.2.0-2.el8ap, 10.2.0-2.el9ap
python3.12-pillow (Red Hat package) - addressed in versions 10.3.0-2.el8ap, 10.3.0-2.el9ap
python3.12-pillow-debugsource (Red Hat package) - update to 10.3.0-2.el9ap
python3.12-azure-storage-blob (Red Hat package) - update to 12.19.0-2.el8ap
python3.12-rich (Red Hat package) - addressed in versions 13.1.0-2.el8ap, 13.1.0-2.el9ap
python3.12-websockets (Red Hat package) - addressed in versions 15.0-3.el8ap, 15.0-3.el9ap
python3.12-virtualenv (Red Hat package) - addressed in versions 20.25.1-2.el8ap, 20.25.1-2.el9ap
python3.12-hyperlink (Red Hat package) - addressed in versions 21.0.0-3.el8ap, 21.0.0-3.el9ap
python3.12-service-identity (Red Hat package) - addressed in versions 21.1.0-3.el8ap, 21.1.0-3.el9ap
python3.12-argon2-cffi-bindings (Red Hat package) - addressed in versions 21.2.0-2.el8ap, 21.2.0-2.el9ap
python3.12-attrs (Red Hat package) - addressed in versions 22.2.0-2.el8ap, 22.2.0-2.el9ap
python3.12-Automat (Red Hat package) - addressed in versions 22.10.0-4.el8ap, 22.10.0-4.el9ap
python3.12-gunicorn (Red Hat package) - addressed in versions 23.0.0-2.el8ap, 23.0.0-2.el9ap
python3.12-argon2-cffi (Red Hat package) - addressed in versions 23.1.0-2.el8ap, 23.1.0-2.el9ap
python3.12-txaio (Red Hat package) - addressed in versions 23.1.1-3.el8ap, 23.1.1-3.el9ap
python3.12-aiofiles (Red Hat package) - addressed in versions 23.2.1-2.el8ap, 23.2.1-2.el9ap
python3.12-packaging (Red Hat package) - addressed in versions 23.2-2.el8, 23.2-2.el9
python3.12-django-filter (Red Hat package) - addressed in versions 23.5-2.el8ap, 23.5-2.el9ap
python3.12-constantly (Red Hat package) - addressed in versions 23.10.4-1.el8ap, 23.10.4-1.el9ap
python3.12-pyOpenSSL (Red Hat package) - addressed in versions 24.1.0-2.el8ap, 24.1.0-2.el9ap
python3.12-autobahn (Red Hat package) - addressed in versions 24.4.2-2.el8ap, 24.4.2-2.el9ap
python3.12-black (Red Hat package) - addressed in versions 24.4.2-3.el8ap, 24.4.2-3.el9ap
python3.12-twisted (Red Hat package) - addressed in versions 24.7.0-2.el8ap, 24.7.0-2.el9ap
python3.12-incremental (Red Hat package) - addressed in versions 24.7.2-2.el8ap, 24.7.2-2.el9ap
ansible-creator (Red Hat package) - addressed in versions 25.12.0-1.1.el8ap, 25.12.0-1.1.el9ap
python3.12-pytest-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
molecule (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-tox-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-ansible-compat (Red Hat package) - addressed in versions 25.12.0-3.el8ap, 25.12.0-3.el9ap
ansible-dev-environment (Red Hat package) - addressed in versions 25.12.2-1.2.el8ap, 25.12.2-1.2.el9ap
ansible-dev-tools (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-lint (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
python3.12-kubernetes (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-navigator (Red Hat package) - addressed in versions 26.1.1-1.1.el8ap, 26.1.1-1.1.el9ap
python3.12-cryptography (Red Hat package) - addressed in versions 42.0.5-2.el8ap, 42.0.5-2.el9ap
python3.12-setuptools (Red Hat package) - update to 68.2.2-5.el9_6
python3.12-certifi (Red Hat package) - addressed in versions 2023.5.7-2.el8ap, 2023.5.7-2.el9ap
python3.12-jsonschema-specifications (Red Hat package) - addressed in versions 2023.12.1-2.el8ap, 2023.12.1-2.el9ap
python3.12-pytz (Red Hat package) - addressed in versions 2024.1-2.el8ap, 2024.1-2.el9ap
python3.12-uuid6 (Red Hat package) - addressed in versions 2024.1.12-2.el8ap, 2024.1.12-2.el9ap
python3.12-dispatcherd (Red Hat package) - addressed in versions 2025.5.19-3.el8ap, 2025.5.19-3.el9ap
python3.12-diff-match-patch (Red Hat package) - addressed in versions 20230430-2.el8ap, 20230430-2.el9ap

• https://github.com/remix-run/react-router/security/advisories/GHSA-2w69-qvjg-hvjx

• XSS in Remix React Router
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages
• IBM DevOps Test Performance update for React Router
• Multiple vulnerabilities in IBM Storage Sentinel Anomaly Scan Engine
• Confluence Data Center update for remix-run/router
• Crowd Data Center update for remix-run/router
• Multiple vulnerabilities in Jira Service Management Data Center
• Multiple vulnerabilities in Jira Software Data Center
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.19
• Multiple vulnerabilities in Ansible Automation Platform 2.6 packages
• Multiple vulnerabilities in IBM Fusion, IBM Fusion HCI and IBM Fusion Data Cataloging
• Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.17
• Multiple vulnerabilities in OpenShift Data Foundation (formerly OpenShift Container Storage) 4.18