stf vulnerabilities (CVE)

CVE records published for stf, newest first. Follow to get an email when a new one appears.

3 results

7.5High

CVE-2026-30922 7 months ago

pyasn1 Vulnerable to Denial of Service via Unbounded Recursion

pyasn1 pyasn1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An attacker can supply a crafted payl…

7.1High

CVE-2026-24049 9 months ago

wheel Allows Arbitrary File Permission Modification via Path Traversal

pypa wheel; Red Hat Discovery 2 for RHEL 10; Red Hat Discovery 2 for RHEL 8; Red Hat Discovery 2 for RHEL 9

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

7.5High

CVE-2026-23490 9 months ago

pyasn1 has a DoS vulnerability in decoder

pyasn1 pyasn1; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 8; Red Hat Red Hat Ansible Automation Platform 2.5 for RHEL 9; Red Hat Red Hat Ansible Automation Platform 2.6 for RHEL 9

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnerability is fixed in 0.6.2.