Skip to content

Vulnerabilities of Red Hat Red Hat Satellite 6

Is your version affected?

CVE Summary Score Published
CVE-2025-69872 DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default 9.8 Critical Feb 11, 2026
CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the… 2.9 Low Feb 11, 2026
CVE-2026-26007 cryptography is a package designed to expose cryptographic primitives and recipes to Python developers 8.2 High Feb 10, 2026
CVE-2026-1312 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Not rated Feb 3, 2026
CVE-2026-1287 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Not rated Feb 3, 2026
CVE-2026-1207 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28 Not rated Feb 3, 2026
CVE-2026-1530 A flaw was found in fog-kubevirt 8.1 High Feb 2, 2026
CVE-2026-1531 A flaw was found in foreman_kubevirt 8.1 High Feb 2, 2026
CVE-2025-24293 # Active Storage allowed transformation methods potentially unsafe Active Storage attempts to prevent the use of… 9.2 Critical Jan 30, 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 High Jan 28, 2026
CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python 8.6 High Jan 27, 2026
CVE-2026-0603 Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection 8.3 High Jan 23, 2026
CVE-2026-0775 npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability 7.0 High Jan 23, 2026
CVE-2026-24049 wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427 7.1 High Jan 22, 2026
CVE-2026-24001 jsdiff is a JavaScript text differencing implementation 2.7 Low Jan 22, 2026
CVE-2025-13465 The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution 6.9 Medium Jan 21, 2026
CVE-2026-23950 node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3 8.8 High Jan 20, 2026
CVE-2026-23745 node-tar is a Tar for Node.js 8.2 High Jan 16, 2026
CVE-2021-47839 Marky 0.0.1 contains a persistent cross-site scripting vulnerability that allows attackers to inject malicious scripts… 5.1 Medium Jan 16, 2026
CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python 7.5 High Jan 16, 2026
CVE-2026-22029 React Router is a router for React 8.0 High Jan 10, 2026
CVE-2025-61686 React Router is a router for React 9.1 Critical Jan 10, 2026
CVE-2026-21441 urllib3 is an HTTP client library for Python 8.9 High Jan 7, 2026
CVE-2025-69223 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 7.5 High Jan 5, 2026
CVE-2025-12790 A flaw was found in Rubygem MQTT 7.4 High Nov 6, 2025

Other Red Hat products