RH
Product
Red Hat Ansible Automation Platform Ansible Core 2
7
CVEs
0
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 4Medium 1Low 0
Watch
Add Red Hat Ansible Automation Platform Ansible Core 2 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-89091 | 8.8 | Oct 8 | Ansible-core: ansible-core: ansible-galaxy collection install symlink path escape allows arbitrary file write / code execution Affected: All versions, or not specified |
| CVE-2026-11332 | 7.8 | Jun 5 | Ansible-core: argument injection in ansible-galaxy role install leads to arbitrary code execution Affected: All versions, or not specified |
| CVE-2026-32274 | 7.5 | Mar 12 | Black: Arbitrary file writes from unsanitized user input in cache file name Affected: All versions, or not specified |
| CVE-2025-69223 | 7.5 | Jan 5 | AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb Affected: All versions, or not specified |
Showing 4