CVE-2026-67325 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, checkov, mlflow, opal, awx, datahub-ingestion...

GHSA-4VPG-PFJ8-M33Q vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, checkov, mlflow, opal, awx, datahub-ingestion...

CVE-2026-76218 vulnerabilities

Vulnerabilities for packages: opal, mlflow, awx, checkov...

CVE-2026-76219 vulnerabilities

Vulnerabilities for packages: opal, mlflow, awx, checkov...

GHSA-7JX3-JQCP-HHGC vulnerabilities

Vulnerabilities for packages: opal, mlflow, awx, checkov...

GHSA-M4F3-G4CQ-HQRX vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, mlflow-fips, checkov, mlflow, opal, awx, datahub-ingestion...

CVE-2026-76217 vulnerabilities

Vulnerabilities for packages: opal, mlflow, awx, checkov...

GHSA-W672-239G-C3GR vulnerabilities

Vulnerabilities for packages: opal, mlflow, awx, checkov...

CVE-2026-67322 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, mlflow-fips, checkov, mlflow, opal, awx, datahub-ingestion...

CVE-2026-67323 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, checkov, mlflow, opal, awx, datahub-ingestion...

GHSA-6R2R-WW24-7H52 vulnerabilities

Vulnerabilities for packages: datahub-ingestion-fips, checkov, mlflow, opal, awx, datahub-ingestion...

CVE-2026-76222 vulnerabilities

Vulnerabilities for packages: opal, mlflow, awx, checkov...

GHSA-39J5-W47M-2GMV vulnerabilities

Vulnerabilities for packages: langfuse-fips, redisinsight, prism, jitsucom-jitsu, gitlab-rails-ce, lerna, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, nextcloud-server, semaphore, librechat, wazuh-dashboard, gitlab-rails-ce-fips, awx, opensearch-dashboards,...

CVE-2026-67320 vulnerabilities

Vulnerabilities for packages: redisinsight, jitsucom-jitsu, lerna, kibana, kubeflow-centraldashboard, nextcloud-server, wazuh-dashboard, prism, langfuse, langfuse-fips, librechat, gitlab-rails-ce-fips, awx, wazuh-dashboard-fips, gitlab-rails-ce, opensearch-dashboards-fips, opensearch-dashboards,...

CVE-2026-67318 vulnerabilities

Vulnerabilities for packages: langfuse-fips, redisinsight, prism, jitsucom-jitsu, gitlab-rails-ce, lerna, kibana, kubeflow-centraldashboard, opensearch-dashboards-fips, wazuh-dashboard-fips, nextcloud-server, semaphore, librechat, wazuh-dashboard, gitlab-rails-ce-fips, awx, opensearch-dashboards,...

CVE-2026-84470

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

CVE-2026-84470 Automation-controller: automation-controller-container: automation-controller/awx: bulk job launch checks instance_groups at read level instead of use level, allowing execution-placement authorization bypass

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

CVE-2026-84470

A permission-check inconsistency in Ansible Automation Platform 's automation-controller (AWX) allows an execution-placement authorization bypass . The Bulk Job Launch API (POST /api/v2/bulk/job_launch/) validates requested instance_groups at only a read-level permission, whereas the standard sin...

EUVD-2026-69605

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...

CVE-2026-84470

A flaw was found in Ansible Automation Platform's automation-controller AWX. The Bulk Job Launch API POST /api/v2/bulk/joblaunch/ authorizes the requested instancegroups with only a read-level permission check, whereas the standard single-job launch path requires use-level permission on the same...