Threats Tagged 'cve-2026-56864'

Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to individual teams, while automation developers retain the freedom to write tasks that leverage existing knowledge without the overhead. Ansible Automation Platform makes it possible for users across an organization to share, vet, and manage automation content by means of a simple, powerful, and agentless language. Security Fix(es): * python-sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing (CVE-2026-54284) * python-sqlparse: Denial of Service via inefficient SQL parsing (CVE-2026-59893) * python-sqlparse: Denial of Service via quadratic CPU consumption in comment grouping (CVE-2026-71491) * python3.12-sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing (CVE-2026-54284) * python3.12-sqlparse: Denial of Service via inefficient SQL parsing (CVE-2026-59893) * python3.12-sqlparse: Denial of Service via quadratic CPU consumption in comment grouping (CVE-2026-71491) * receptor: Go html/template: Cross-Site Scripting via pathological input (CVE-2026-56858) * receptor: Go: Denial of Service via XML decoding recursion depth issue (CVE-2026-56859) * receptor: golang net/url: Denial of Service from quadratic complexity in path resolution (CVE-2026-56860) * receptor: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal (CVE-2026-33818) * receptor: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages (CVE-2026-56862) * receptor: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service (CVE-2026-56853) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. For details about this release, refer to the release notes listed in the References section.

Two vulnerabilities identified as CVE-2026-56864 and CVE-2026-56865 affect the opentelemetry-collector-contrib package. These issues are addressed in version 0.159.0-r1 of the package. The vulnerabilities impact versions earlier than 0.159.0-r1. No CVSS score is provided for these vulnerabilities.

Two vulnerabilities identified as CVE-2026-56864 and CVE-2026-56865 affect the opentelemetry-collector-contrib package. These issues are addressed in version 0.159.0-r2 of the package. Users running versions earlier than 0.159.0-r2 should upgrade to mitigate these vulnerabilities.

The ollama package version 0.32.11-r1 addresses three security vulnerabilities, including CVE-2026-56864. This release fixes these issues, improving the security posture of the software. No specific technical details or impact descriptions are provided for CVE-2026-56864. There are no known exploits in the wild for this vulnerability. The affected versions include all versions prior to 0.32.11-r1.

A vulnerability identified as CVE-2026-56864 affects the atlantis-fips package. The issue is addressed in version 0.45.0-r2, which includes security fixes. No detailed technical information or CVSS score is provided for this vulnerability.

A vulnerability identified as CVE-2026-56864 affects the atlantis-fips package. The issue is addressed in version 0.45.0-r1, which includes security fixes. Versions prior to 0.45.0-r1 are vulnerable. No CVSS score or detailed technical information about the vulnerability is provided. There are no known exploits in the wild at this time.

A vulnerability identified as CVE-2026-56864 affects the atlantis-fips package. The issue is addressed in version 0.44.1-r1 of the package, which includes security fixes. No specific technical details or impact scenarios are provided. There are no known exploits in the wild. The vulnerability affects versions prior to 0.44.1-r1.

Cluster-autoscaler version 1.36.1-r1 addresses multiple security vulnerabilities including CVE-2026-56864. The update fixes seven distinct vulnerabilities affecting versions prior to and including 1.36.1-r1. No CVSS score is available for CVE-2026-56864, and there are no known exploits in the wild. The package is not a cloud service, so remediation requires applying the update.

Cluster-autoscaler version 1.36.1-r2 addresses four security vulnerabilities including CVE-2026-56864. The update fixes these issues to improve the security posture of the software. No specific technical details or exploitation methods are provided for CVE-2026-56864. There are no known exploits in the wild at this time.

Two vulnerabilities identified as CVE-2026-56864 and CVE-2026-56865 affect the cluster-autoscaler package. These vulnerabilities are addressed in version 1.36.1-r3. Users running versions earlier than 1.36.1-r3 should upgrade to mitigate these issues. No CVSS score or detailed impact information is provided. There are no known exploits in the wild at this time.