Threats Tagged 'ghsa-wm9g-p29j-v3wh'

CVE-2026-71463 is a low severity vulnerability in Red Hat Ansible Automation Platform 2.5 for RHEL 8 where the notification template Jinja AST whitelist only inspects static Getattr nodes, allowing dynamic subscripts and conditional gating to bypass checks. This results in full tracebacks being included in notification bodies sent to attacker-controlled webhook URLs, leaking sensitive information such as install paths, Python version, and source line numbers.