Vulnerabilities of Red Hat Red Hat Ansible Automation Platform 2

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-1615	Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of…	9.8 Critical	Feb 9, 2026
CVE-2026-0598	A security flaw was identified in the Ansible Lightspeed API conversation endpoints that handle AI chat interactions	4.2 Medium	Feb 6, 2026
CVE-2026-1312	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1287	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2026-1207	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28	Not rated	Feb 3, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-61140	The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution	9.8 Critical	Jan 28, 2026
CVE-2026-24486	Python-Multipart is a streaming multipart parser for Python	8.6 High	Jan 27, 2026
CVE-2026-0994	A denial-of-service (DoS) vulnerability exists in google.protobuf.json_format.ParseDict() in Python, where the…	8.2 High	Jan 23, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2025-68616	WeasyPrint helps web developers to create PDF documents	7.5 High	Jan 19, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2025-15514	Ollama 0.11.5-rc0 through current version 0.13.5 contain a null pointer dereference vulnerability in the multi-modal…	8.7 High	Jan 12, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2025-14025	A flaw was found in Ansible Automation Platform (AAP)	8.5 High	Jan 8, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-69223	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	7.5 High	Jan 5, 2026
CVE-2025-10894	Malicious code was inserted into the Nx (build system) package and several related plugins	9.6 Critical	Sep 24, 2025
CVE-2025-53861	A flaw was found in Ansible	3.1 Low	Jul 11, 2025
CVE-2025-53862	A flaw was found in Ansible	3.5 Low	Jul 11, 2025

Other Red Hat products