RHSA-2025:23196HighCVSS 8.8
Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Ansible DevSpaces Container Release Update
🔗 CVE IDs covered (3)
📋 Description
CVE-2025-59681 — django: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB1 CVE-2025-59682 — django: Potential partial directory-traversal via archive.extract() CVE-2025-64459 — django: Django SQL injection
🔗 References (7)
- selfhttps://access.redhat.com/errata/RHSA-2025:23196
- externalhttps://access.redhat.com/security/cve/CVE-2025-59681
- externalhttps://access.redhat.com/security/cve/CVE-2025-59682
- externalhttps://access.redhat.com/security/cve/CVE-2025-64459
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.6/html/release_notes/patch_releases
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_23196.json