GHSA-8988-9CW3-XX77 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.2-fips, openstack-keystone-2025.1, semaphore, openstack-kolla-toolbox-2025.2-fips, aws-cli, openstack-keystone-2026.1-fips, py3-pipenv, openstack-barbican-2026.1, openstack-keystone-2026.1, openstack-keystone-2025.2-fips,...

GHSA-GH4C-6FX4-QH6G vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1-fips, openstack-glance-2025.2-fips, semaphore, aws-cli, openstack-keystone-2026.1-fips, py3-pipenv, openstack-barbican-2026.1, openstack-keystone-2026.1, openstack-designate-2025.2, openstack-keystone-2025.2-fips, openstack-barbican-2025.2,...

CVE-2026-97689 vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.2-fips, openstack-keystone-2025.1, semaphore, openstack-octavia-2025.2, openstack-kolla-toolbox-2025.2-fips, aws-cli, openstack-keystone-2026.1-fips, py3-pipenv, openstack-barbican-2026.1, openstack-keystone-2026.1, openstack-barbican-2025.2,...

GHSA-VXQ7-64XX-V4GW vulnerabilities

Vulnerabilities for packages: openstack-glance-2025.2-fips, openstack-keystone-2025.1, semaphore, openstack-octavia-2025.2, openstack-kolla-toolbox-2025.2-fips, aws-cli, openstack-keystone-2026.1-fips, py3-pipenv, openstack-barbican-2026.1, openstack-keystone-2026.1, openstack-barbican-2025.2,...

GHSA-G6CJ-PR64-35W5 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, vast-csi, dask-kubernetes, lmcache-cuda-12.8, openstack-keystone-2025.1, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-13.0, request-1276, metaflow-service, superset, openstack-placement-2025.1, datadog-agent-fips, kubeflow,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: vllm-openai-cuda-12.9, vast-csi, dask-kubernetes, lmcache-cuda-12.8, openstack-keystone-2025.1, tritonserver-backend-vllm-cuda-13.0, vllm-openai-cuda-13.0, request-1276, metaflow-service, superset, openstack-placement-2025.1, datadog-agent-fips, kubeflow,...

CVE-2024-9902 vulnerabilities

Vulnerabilities for packages: ansible-operator...

GHSA-32P4-GM2C-WMCH vulnerabilities

Vulnerabilities for packages: ansible-operator...

GHSA-Q2X7-8RV6-6Q7H vulnerabilities

Vulnerabilities for packages: py3-jinja2, emissary, kubeflow-pipelines-visualization-server, localstack, nemo, reflex, dask-gateway, mlflow, kubeflow-jupyter-web-app, superset, kserve, airflow, ansible-operator, apache-beam-python-3.11-sdk, kubeflow-volumes-web-app, checkov...

GHSA-GMJ6-6F8F-6699 vulnerabilities

Vulnerabilities for packages: py3-jinja2, emissary, localstack, nemo, reflex, dask-gateway, mlflow, kubeflow-jupyter-web-app, superset, kserve, airflow, ansible-operator, apache-beam-python-3.11-sdk, kubeflow-volumes-web-app, checkov...

CVE-2024-56201 vulnerabilities

Vulnerabilities for packages: py3-jinja2, emissary, localstack, nemo, reflex, dask-gateway, mlflow, kubeflow-jupyter-web-app, superset, kserve, airflow, ansible-operator, apache-beam-python-3.11-sdk, kubeflow-volumes-web-app, checkov...

CVE-2024-11079 vulnerabilities

Vulnerabilities for packages: py3-ansible-core, ansible-operator...

GHSA-32P4-GM2C-WMCH vulnerabilities

Vulnerabilities for packages: ansible-operator...

CVE-2024-9902 vulnerabilities

Vulnerabilities for packages: ansible-operator...

Security Bulletin: IBM Maximo Application Suite uses ansible-operator 7.11.6 which is vulnerable to CVE-2024-0690.

Summary IBM Maximo Application Suite uses ansible-operator 7.11.6 which is vulnerable to CVE-2024-0690. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-0690 DESCRIPTION: Red Hat Ansible could allow a local authenticated attacker...

Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities

Summary Ansible-operator and opm are used by IBM Cloud Pak for Data Scheduling as part of the ibm-cpd-scheduling-operator and ibm-cpd-scheduler-operator-catalog image used for installation of the Scheduler. This bulletin identifies the steps to take to address the below vulnerabilities...

Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to multiple ansible-operator and opm vulnerabilities

Summary Ansible-operator and opm is used by IBM Cloud Pak for Data Scheduling as part of the Ansible operator used for installation of the Scheduler. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2022-23471 DESCRIPTION: containerd is...

Security Bulletin: IBM Cloud Pak for Data Scheduling is vulnerable to python vulnerability ( CVE-2022-40897 )

Summary Python is used by IBM Cloud Pak for Data as part of the Ansible operator for installation. Vulnerability Details CVEID:CVE-2022-40897 DESCRIPTION: Pypa Setuptools is vulnerable to a denial of service, caused by improper input validation. By sending request with a specially crafted regular...

CVE-2019-19355

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as...

CVE-2019-19355

An insecure modification vulnerability in the /etc/passwd file was found in the openshift/ocp-release-operator-sdk. An attacker with access to the container could use this flaw to modify /etc/passwd and escalate their privileges. This CVE is specific to the openshift/ansible-operator-container as...