← All credits

Red Hat would like to thank Martin Brodeur (Fluentlogic) for reporting this issue.

2 vulnerability records and advisories credit this contributor.

YAML safe_load production fallback to unsafe_load enables RCE via deserialization

Awx: automation-controller: awx: github webhook second-order ssrf via unvalidated statuses_url exfiltrates pat credential