Service Telemetry Framework 1.5 vulnerabilities

4 known vulnerabilities in Service Telemetry Framework 1.5 from Red Hat. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.5 High severity

  Red Hat Ansible Automation Platform 2.6: Improper Neutralization of Special Elements Used in a Template Engine

  CVE-2026-92982Oct 15, 2026Red Hat

  A flaw was found in Ansible Operator Plugins. A low-privileged Kubernetes user can exploit a Jinja2 template injection vulnerability by crafting malicious custom resource (CR) specification values. These values are processed by Ansible without proper sanitizat

• 7.8 High severity

  Red Hat Ansible Automation Platform 2.5 for…: Improper Neutralization of Argument Delimiters in a Command

  CVE-2026-11332Jun 5, 2026Red Hat

  A flaw was found in ansible-core. The ansible-galaxy role install command processes dependency specifications from a role's meta/requirements.yml file. Due to improper neutralization of argument delimiters, a malicious role author can inject arbitrary git conf

• 7.5 High severity

  urllib3: Improper Handling of Highly Compressed Data (Data Amplification)

  CVE-2026-44432May 13, 2026Urllib3

  urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the response was decompressed using the official Bro

• 7.8 High severity

  Fence Agents Remediation Operator: Deserialization of Untrusted Data

  CVE-2025-56005Jan 20, 2026Red HatEPSS 18.8%

  An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without vali