RHSA-2025:19221HighCVSS 8.8
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
🔗 CVE IDs covered (5)
📋 Description
CVE-2025-9907 — event-driven-ansible: Event Stream Test Mode Exposes Sensitive Headers in AAP EDA CVE-2025-9908 — event-driven-ansible: Sensitive Internal Headers Disclosure in AAP EDA Event Streams CVE-2025-58754 — axios: Axios DoS via lack of data size check CVE-2025-59343 — tar-fs: tar-fs symlink validation bypass CVE-2025-59682 — django: Potential partial directory-traversal via archive.extract()
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2025:19221
- externalhttps://access.redhat.com/security/cve/CVE-2025-58754
- externalhttps://access.redhat.com/security/cve/CVE-2025-59343
- externalhttps://access.redhat.com/security/cve/CVE-2025-59682
- externalhttps://access.redhat.com/security/cve/CVE-2025-9907
- externalhttps://access.redhat.com/security/cve/CVE-2025-9908
- externalhttps://access.redhat.com/security/updates/classification/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_19221.json