Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update

🗓️ 28 Jan 2026 17:34:52Reported by RedHatType

Security update for Red Hat Ansible Automation Platform 2.5 fixes multiple vulnerabilities and updates core components.

Reporter	Title	Published	Views	Family All 3018
vulnersOsv	aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1470 more potentially affected by CVE-2025-64460 via django (>=5.2.0 <=5.2.8)	2 Dec 202518:30	–	vulnersosv
vulnersOsv	aba-cli-scrapper (>=0.1.1 <=0.1.6), academic-metrics (>=0.1.0b0 <=1.0.99) +1034 more potentially affected by CVE-2025-53643 via aiohttp (>=0.13.1 <=3.12.13)	14 Jul 202519:33	–	vulnersosv
vulnersOsv	chromatrace (>=0.1.6 <=0.1.7), ddos-blocker (>=0.0.3 <=0.0.13) +21 more potentially affected by CVE-2025-64460 via django (>=5.1.0 <=5.1.14)	2 Dec 202518:30	–	vulnersosv
vulnersOsv	0lever-utils (>=0.0.2 <=0.0.7), 0xdegenmo-lighter-mcp (=0.1.1) +16246 more potentially affected by CVE-2025-66471 via urllib3 (>=1.10.2 <=2.5.0)	5 Dec 202518:15	–	vulnersosv
vulnersOsv	aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1470 more potentially affected by CVE-2025-64460 via django (>=5.2.0 <=5.2.8)	2 Dec 202515:41	–	vulnersosv
vulnersOsv	chromatrace (>=0.1.6 <=0.1.7), ddos-blocker (>=0.0.3 <=0.0.13) +21 more potentially affected by CVE-2025-64460 via django (>=5.1.0 <=5.1.14)	2 Dec 202516:15	–	vulnersosv
vulnersOsv	aba-cli-scrapper (>=0.1.1 <=0.1.6), academic-metrics (>=0.1.0b0 <=1.0.99) +905 more potentially affected by CVE-2025-53643 via aiohttp (>=3.0.0b0 <=3.12.13)	14 Jul 202519:33	–	vulnersosv
vulnersOsv	a-mailx (=0.1.0), aba-cli-scrapper (>=0.1.1 <=0.1.6) +1115 more potentially affected by CVE-2025-69223 via aiohttp (>=3.0.0b0 <=3.13.2)	5 Jan 202622:58	–	vulnersosv
vulnersOsv	aa-altcorp (>=0.1.2b0 <=1.1.1), aa-alumni (>=0.0.1a1 <=1.0.1) +1470 more potentially affected by CVE-2025-64460 via django (>=5.2.0 <=5.2.8)	2 Dec 202516:15	–	vulnersosv
vulnersOsv	aldryn-django (>=4.2.10.0 <=4.2.18.0), alertwise (=1.0.0) +113 more potentially affected by CVE-2025-64460 via django (>=4.2.0 <=4.2.26)	2 Dec 202518:30	–	vulnersosv

Source	Link
access	www.access.redhat.com/security/updates/classification/
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
docs	www.docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5
docs	www.docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases

31 Jul 2026 14:58Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.17.5

CVSS 48.9

EPSS0.02116

SSVC