RHSA-2026:92574
Vulnerability from csaf_redhat - Published: 2026-10-29 16:27 - Updated: 2026-11-01 18:53Summary
Red Hat Security Advisory: Technical preview of the satellite/iop-vmaas-rhel9 container image
Severity
Important
Notes
Topic: A new satellite/iop-vmaas-rhel9 container image is now available as a technical preview in the Red Hat container registry.
Details: Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor > 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it's easy to forge signatures on the small subgroup. Only SECT curves are impacted by this.
7.4 (High)
Affected products
Fixed
1 product
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in AnyIO. A remote attacker in a privileged network position can bypass Transport Layer Security (TLS) certificate validation when connecting to internationalized domain names. This vulnerability occurs because the framework converts internationalized hostnames using an outdated encoding standard, Internationalizing Domain Names in Applications (IDNA) 2003 instead of IDNA 2008. If network traffic is redirected or intercepted, an attacker can present a legitimate certificate for the mismatched domain name, allowing them to impersonate the intended server and intercept or alter sensitive communications.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Moderate
A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process.
7.4 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Important
A flaw was found in GitPython. A remote attacker could exploit a regular expression denial of service (ReDoS) vulnerability by crafting a malicious commit object. Specifically, a malformed author field containing an unterminated angle bracket can cause excessive processing, leading to the exhaustion of CPU resources and a denial of service for over two minutes per commit access.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Important
A flaw was found in rustls-webpki. A remote attacker, by influencing an application to parse a specially crafted Certificate Revocation List (CRL) that contains an empty `onlySomeReasons` value in its `issuingDistributionPoint` extension, could trigger a panic. This vulnerability leads to a denial of service (DoS) in applications that explicitly enable CRL revocation checking.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Important
A flaw was found in GitPython. A remote attacker can trigger a Denial of Service (DoS) by providing a malicious repository containing commit or tag objects with long, space-filled lines lacking a valid timestamp or timezone. When parsing these lines, the regular expression pattern triggers quadratic backtracking, leading to high CPU consumption and causing the application to become unresponsive.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Important
A flaw was found in GitPython. A remote attacker can achieve arbitrary code execution by supplying specially crafted repository URLs that are processed without proper protocol validation. Because the library forwards untrusted URLs and input parameters to the underlying Git utility without adequate sanitization, an attacker can execute arbitrary system commands within the context of the host application.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Important
A flaw was found in GitPython. An argument injection vulnerability in the branch checkout mechanism allows a remote attacker to read arbitrary files from the host system. By enticing an application to clone and check out a repository with a specially crafted branch name, an attacker can cause command error messages to disclose sensitive local file contents.
7.5 (High)
Affected products
Fixed
1 product, the same list as for
CVE-2026-26007
Threats
Impact
Important
References
64 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new satellite/iop-vmaas-rhel9 container image is now available as a technical preview in the Red Hat container registry.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat Lightspeed in Satellite analyzes system health and configuration by applying predefined rules to a small set of local data, such as installed packages, running services, and configuration settings.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:92574",
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
},
{
"category": "external",
"summary": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index",
"url": "https://access.redhat.com/documentation/en-us/red_hat_satellite/6.19/html/updating_red_hat_satellite/index"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110856",
"url": "https://access.redhat.com/security/cve/CVE-2026-110856"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110857",
"url": "https://access.redhat.com/security/cve/CVE-2026-110857"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-110859",
"url": "https://access.redhat.com/security/cve/CVE-2026-110859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-26007",
"url": "https://access.redhat.com/security/cve/CVE-2026-26007"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-63374",
"url": "https://access.redhat.com/security/cve/CVE-2026-63374"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-84782",
"url": "https://access.redhat.com/security/cve/CVE-2026-84782"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-87819",
"url": "https://access.redhat.com/security/cve/CVE-2026-87819"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-93599",
"url": "https://access.redhat.com/security/cve/CVE-2026-93599"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://catalog.redhat.com/software/containers/search",
"url": "https://catalog.redhat.com/software/containers/search"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite",
"url": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_connected_network_environment/performing-additional-configuration-on-server_satellite#installing-and-configuring-red-hat-lightspeed-in-satellite"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite",
"url": "https://docs.redhat.com/en/documentation/red_hat_satellite/6.19/html/installing_satellite_server_in_a_disconnected_network_environment/performing-additional-configuration#installing-and-configuring-red-hat-lightspeed-in-satellite"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_92574.json"
}
],
"title": "Red Hat Security Advisory: Technical preview of the satellite/iop-vmaas-rhel9 container image",
"tracking": {
"current_release_date": "2026-11-01T18:53:49+00:00",
"generator": {
"date": "2026-11-01T18:53:49+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.4.4"
}
},
"id": "RHSA-2026:92574",
"initial_release_date": "2026-10-29T16:27:51+00:00",
"revision_history": [
{
"date": "2026-10-29T16:27:51+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-10-29T16:27:53+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-11-01T18:53:49+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Satellite 6.19",
"product": {
"name": "Red Hat Satellite 6.19",
"product_id": "Red Hat Satellite 6.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:satellite:6.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Satellite"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64",
"product": {
"name": "registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64",
"product_id": "registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/iop-vmaas-rhel9@sha256%3Afcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb?arch=amd64\u0026repository_url=registry.redhat.io/satellite/iop-vmaas-rhel9\u0026tag=1793197872"
}
}
}
],
"category": "architecture",
"name": "amd64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64 as a component of Red Hat Satellite 6.19",
"product_id": "Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
},
"product_reference": "registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64",
"relates_to_product_reference": "Red Hat Satellite 6.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-26007",
"cwe": {
"id": "CWE-354",
"name": "Improper Validation of Integrity Check Value"
},
"discovery_date": "2026-02-10T22:01:01.036116+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2438762"
}
],
"notes": [
{
"category": "description",
"text": "A validation flaw has been discovered in the python cryptography package. This missing validation allows an attacker to provide a public key point P from a small-order subgroup. This can lead to security issues in various situations, such as the most commonly used signature verification (ECDSA) and shared key negotiation (ECDH). When the victim computes the shared secret as S = [victim_private_key]P via ECDH, this leaks information about victim_private_key mod (small_subgroup_order). For curves with cofactor \u003e 1, this reveals the least significant bits of the private key. When these weak public keys are used in ECDSA , it\u0027s easy to forge signatures on the small subgroup. Only SECT curves are impacted by this.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw, while difficult to exploit, would lead to a loss of integrity in the encrypted communication channel. Given that the cryptography package is a library, it is likely to be used in situations that do not require user interaction.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-26007"
},
{
"category": "external",
"summary": "RHBZ#2438762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2438762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-26007",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-26007"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-26007",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-26007"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c",
"url": "https://github.com/pyca/cryptography/commit/0eebb9dbb6343d9bc1d91e5a2482ed4e054a6d8c"
},
{
"category": "external",
"summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2",
"url": "https://github.com/pyca/cryptography/security/advisories/GHSA-r6ph-v2qm-q3c2"
}
],
"release_date": "2026-02-10T21:42:56.471000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "cryptography: cryptography Subgroup Attack Due to Missing Subgroup Validation for SECT Curves"
},
{
"cve": "CVE-2026-63374",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-09-22T21:49:20.725016+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538958"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in AnyIO. A remote attacker in a privileged network position can bypass Transport Layer Security (TLS) certificate validation when connecting to internationalized domain names. This vulnerability occurs because the framework converts internationalized hostnames using an outdated encoding standard, Internationalizing Domain Names in Applications (IDNA) 2003 instead of IDNA 2008. If network traffic is redirected or intercepted, an attacker can present a legitimate certificate for the mismatched domain name, allowing them to impersonate the intended server and intercept or alter sensitive communications.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having a Moderate severity for Red Hat products because exploitation requires an attacker to already be positioned to intercept network traffic, and the flaw only manifests when connecting to internationalized domain names containing non-ASCII characters. Within Red Hat supported environments and containerized AI components, workloads predominantly communicate using standard ASCII fully qualified domain names and internal endpoints. Because the defect does not allow remote code execution and requires a prior man-in-the-middle condition, the overall blast radius is constrained to specific redirected sessions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-63374"
},
{
"category": "external",
"summary": "RHBZ#2538958",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538958"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-63374",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-63374"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-63374",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-63374"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce",
"url": "https://github.com/agronholm/anyio/commit/68f58915f82d9be8109ebbbd8f5d70577d43f2ce"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/pull/1208",
"url": "https://github.com/agronholm/anyio/pull/1208"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/releases/tag/4.14.2",
"url": "https://github.com/agronholm/anyio/releases/tag/4.14.2"
},
{
"category": "external",
"summary": "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6",
"url": "https://github.com/agronholm/anyio/security/advisories/GHSA-82r6-8w77-94w6"
}
],
"release_date": "2026-09-22T15:23:14.259000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "anyio: AnyIO: TLS certificate spoofing via improper internationalized domain name encoding"
},
{
"cve": "CVE-2026-84782",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-18T19:58:21.939000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2537080"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSL. The Datagram Transport Layer Security (DTLS) retransmission mechanism fails to properly handle handshake message writes that are suspended before completion. A remote attacker could exploit this vulnerability during handshake message retransmission, causing OpenSSL to read past the message buffer or overwrite internal state required to resume writing. This issue can result in information disclosure through out-of-bounds memory reads or cause a Denial of Service (DoS) by crashing the process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity because an unauthenticated network adversary can trigger process crashes or memory exposure without requiring local system privileges. Red Hat Enterprise Linux utilizes OpenSSL as the fundamental cryptographic provider across the operating system; however, overall exposure is limited because the flaw strictly affects software using Datagram Transport Layer Security (DTLS) over UDP under non-blocking I/O configurations. Standard TLS connections over TCP, which represent the typical deployment model for the majority of Red Hat workloads and system services, are unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-84782"
},
{
"category": "external",
"summary": "RHBZ#2537080",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2537080"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-84782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-84782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-84782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-84782"
},
{
"category": "external",
"summary": "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782",
"url": "https://openssl-library.org/news/vulnerabilities/#CVE-2026-84782"
}
],
"release_date": "2026-09-29T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssl: compat-openssl: openssl: Information disclosure via DTLS handshake retransmission"
},
{
"cve": "CVE-2026-87819",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-09-09T11:31:19.834714+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2530742"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. A remote attacker could exploit a regular expression denial of service (ReDoS) vulnerability by crafting a malicious commit object. Specifically, a malformed author field containing an unterminated angle bracket can cause excessive processing, leading to the exhaustion of CPU resources and a denial of service for over two minutes per commit access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Denial of Service via crafted commit author field",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A regular expression denial of service vulnerability was found in GitPython when processing commit author and committer fields. The Actor.name_email_regex pattern exhibits quadratic backtracking when encountering malformed author fields containing unterminated angle brackets. An attacker who can introduce a crafted commit object into a repository that is subsequently processed by a GitPython application can cause excessive CPU resource consumption, leading to denial of service for over two minutes per commit access. This requires the application to parse commits from untrusted sources such as public git servers, tarballs, or automated import tools.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-87819"
},
{
"category": "external",
"summary": "RHBZ#2530742",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2530742"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-87819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-87819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-87819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-87819"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-g5vv-9gxw-82hx"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos",
"url": "https://www.vulncheck.com/advisories/gitpython-before-3.1.60-denial-of-service-via-redos"
}
],
"release_date": "2026-09-09T11:21:05.360000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
},
{
"category": "workaround",
"details": "Update GitPython to version 3.1.60 or later. Validate and sanitize git repository sources before processing. Enable git fsck validation (receive.fsckObjects) on git servers to reject malformed commit objects. Implement length limits on commit metadata fields before processing.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Denial of Service via crafted commit author field"
},
{
"cve": "CVE-2026-93599",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-09-22T18:32:06.471964+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2538431"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in rustls-webpki. A remote attacker, by influencing an application to parse a specially crafted Certificate Revocation List (CRL) that contains an empty `onlySomeReasons` value in its `issuingDistributionPoint` extension, could trigger a panic. This vulnerability leads to a denial of service (DoS) in applications that explicitly enable CRL revocation checking.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because an unauthenticated remote attacker can cause an immediate denial of service by triggering an unhandled panic in network-facing services. Exploitation requires the consuming software to explicitly enable Certificate Revocation List (CRL) validation, a capability that is disabled by default in standard rustls configurations. Applications and services that actively ingest revocation lists from untrusted endpoints face service termination, whereas environments utilizing default certificate verification workflows remain unaffected.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-93599"
},
{
"category": "external",
"summary": "RHBZ#2538431",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2538431"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-93599",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-93599"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-93599",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-93599"
},
{
"category": "external",
"summary": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8",
"url": "https://github.com/rustls/webpki/security/advisories/GHSA-82j2-j2ch-gfr8"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string",
"url": "https://www.vulncheck.com/advisories/rustls-webpki-before-0.103.13-panic-via-empty-bit-string"
}
],
"release_date": "2026-09-18T13:20:10.258000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "rustls-webpki: rustls-webpki: Denial of Service via crafted Certificate Revocation List"
},
{
"cve": "CVE-2026-110856",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-10-14T23:02:28.242131+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552977"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. A remote attacker can trigger a Denial of Service (DoS) by providing a malicious repository containing commit or tag objects with long, space-filled lines lacking a valid timestamp or timezone. When parsing these lines, the regular expression pattern triggers quadratic backtracking, leading to high CPU consumption and causing the application to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important severity because Red Hat services and containerized environments that ingest remote repositories can be exposed to sustained service outages without requiring administrative privileges or local system access. When an integration processes a repository that includes specifically structured author or tag metadata, the regex evaluation experiences severe resource exhaustion, stalling worker processes. While this defect disrupts service availability across automation workflows and analysis pipelines, it does not allow unauthorized data access or arbitrary code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110856"
},
{
"category": "external",
"summary": "RHBZ#2552977",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552977"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110856",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110856"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110856",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110856"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-m64x-33q8-m5h7"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-3.2.0-redos-via-re-actor-epoch-in-parse-actor-and-date",
"url": "https://www.vulncheck.com/advisories/gitpython-before-3.2.0-redos-via-re-actor-epoch-in-parse-actor-and-date"
}
],
"release_date": "2026-10-14T22:52:38.541000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing"
},
{
"cve": "CVE-2026-110857",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command"
},
"discovery_date": "2026-10-14T23:01:39.302092+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552966"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. A remote attacker can achieve arbitrary code execution by supplying specially crafted repository URLs that are processed without proper protocol validation. Because the library forwards untrusted URLs and input parameters to the underlying Git utility without adequate sanitization, an attacker can execute arbitrary system commands within the context of the host application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as having an Important impact for Red Hat products because an attacker capable of supplying unvalidated repository sources to automated platform tasks could achieve arbitrary code execution under the privileges of the executing service. While default configurations in modern underlying git tools restrict dangerous external transport helpers, environments operating on older platform stacks or custom configurations that permit extended transport protocols face elevated exposure. Exploitation is constrained to scenarios where the host application processes untrusted repository references or user-supplied command arguments without prior sanitization.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110857"
},
{
"category": "external",
"summary": "RHBZ#2552966",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552966"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110857",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110857"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110857",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110857"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-w8jc-g24h-crhw"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls",
"url": "https://www.vulncheck.com/advisories/gitpython-before-3.2.0-command-execution-via-ls-remote-ext-urls"
}
],
"release_date": "2026-10-14T22:52:40.373000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling"
},
{
"cve": "CVE-2026-110859",
"cwe": {
"id": "CWE-88",
"name": "Improper Neutralization of Argument Delimiters in a Command"
},
"discovery_date": "2026-10-14T23:03:29.261426+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2552989"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in GitPython. An argument injection vulnerability in the branch checkout mechanism allows a remote attacker to read arbitrary files from the host system. By enticing an application to clone and check out a repository with a specially crafted branch name, an attacker can cause command error messages to disclose sensitive local file contents.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "GitPython: GitPython: Arbitrary file read via argument injection in branch checkout",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as an Important severity impact because unauthenticated remote attackers can read sensitive system files with no prior privileges if a service is directed to clone an untrusted repository. In Red Hat environments such as Ansible Automation Platform, Satellite, and OpenShift AI, automated workflows frequently retrieve and synchronize external Git sources. When an affected service processes an untrusted repository containing a specially manipulated reference name, local host files can be exposed via returned error diagnostics.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-110859"
},
{
"category": "external",
"summary": "RHBZ#2552989",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2552989"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-110859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-110859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-110859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-110859"
},
{
"category": "external",
"summary": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2",
"url": "https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-23mf-xhv8-69c2"
},
{
"category": "external",
"summary": "https://www.vulncheck.com/advisories/gitpython-before-3.2.0-arbitrary-file-read-via-head-checkout-branch-name",
"url": "https://www.vulncheck.com/advisories/gitpython-before-3.2.0-arbitrary-file-read-via-head-checkout-branch-name"
}
],
"release_date": "2026-10-14T22:52:43.585000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-10-29T16:27:51+00:00",
"details": "For Red Hat Lightspeed in Satellite installation see the Red Hat Satellite documentation.",
"product_ids": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:92574"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Satellite 6.19:registry.redhat.io/satellite/iop-vmaas-rhel9@sha256:fcdb765a20d5b6e45582984b2c78a9f86b0b8cd17d25cf969564a55042e0febb_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "GitPython: GitPython: Arbitrary file read via argument injection in branch checkout"
}
]
}
Loading…
Loading…
Drag nodes to arrange them. Double-click a related vulnerability to open it, or a source to visit its link. The Physics button on the left tunes the layout and the simulation; the legend at the bottom left hides or shows nodes by kind and by sighting type.
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Vulnerability timeline
Sightings and recorded dates, grouped by day · UTC
Loading timeline…
Loading…
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.