RH
Product
Red Hat Ansible Automation Platform 2.1
15
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 6Medium 0Low 0
Watch
Add Red Hat Ansible Automation Platform 2.1 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-44005 | 10.0 | May 13 | vm2: Sandbox escape Affected: All versions, or not specified |
| CVE-2026-44006 | 10.0 | May 13 | vm2: Sandbox Escape Affected: All versions, or not specified |
| CVE-2026-43997 | 10.0 | May 13 | vm2: Sandbox Escape Affected: All versions, or not specified |
| CVE-2026-43999 | 9.9 | May 13 | vm2: NodeVM builtin allowlist bypass via `module` builtin's `Module._load` allows sandbox escape Affected: All versions, or not specified |
| CVE-2026-45411 | 9.8 | May 13 | vm2: Sandbox Breakout Using Async Generator Affected: All versions, or not specified |
| CVE-2026-44009 | 9.8 | May 13 | vm2: Sandbox Breakout Through Null Proto Exception Affected: All versions, or not specified |
| CVE-2026-44008 | 9.8 | May 13 | vm2: Snabox breakout via `neutralizeArraySpeciesBatch` Affected: All versions, or not specified |
| CVE-2025-61140 | 9.8 | Jan 28 | The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution Affected: All versions, or not specified |
| CVE-2026-44007 | 9.1 | May 13 | vm2: nesting: true bypasses require: false, allowing sandbox escape to arbitrary OS command execution Affected: All versions, or not specified |
Showing 9