Red Hat Ansible Automation Platform 2.7 for RHEL 10 vulnerabilities

3 known vulnerabilities in Red Hat Ansible Automation Platform 2.7 for RHEL 10 from Red Hat. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Red Hat Ansible Automation Platform 2.5 for…: Improper Neutralization of Argument Delimiters in a Command

  CVE-2026-11332Jun 5, 2026Red Hat

  A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git conf

• 7.5 High severity

  crypto/x509: Unchecked Input for Loop Condition

  CVE-2026-27145Jun 2, 2026Go standard library

  (*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification co

• 8.2 High severity

  net/http: Improper Validation of Unsafe Equivalence in Input

  CVE-2026-39821May 22, 2026Go standard libraryEPSS 1.83%

  The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly returns the name "example.com" rather than an error. This behavior can lead to privilege e