VulnSea

ansible_automation_platform_execution_environments vulnerabilities

CVEs whose affected-version data names the ansible_automation_platform_execution_environments package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

5 CVEsRSS

CVE-2026-69244High· 7.5
2mo ago

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C response parser while building an error message for a malformed response. An attacker contro…

▾ TwilightRed Hat · Red Hat OpenShift AI 2.25EPSS 0.53%via NVD
CVE-2025-27516High· 7.3
1y ago

jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516)

A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit t…

▾ TwilightRed Hat · Quay v3EPSS 0.51%via CSAF
CVE-2024-56326Medium· 6.3
1y ago

jinja2: Jinja has a sandbox breakout through indirect reference to format method (CVE-2024-56326)

A flaw was found in the Jinja package. In affected versions of Jinja, an oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python co…

▾ SunlitRed Hat · Red Hat OpenShift Container Platform 4.18EPSS 0.52%via CSAF
CVE-2024-56201High· 7.3
1y ago

jinja2: Jinja has a sandbox breakout through malicious filenames (CVE-2024-56201)

A flaw was found in the Jinja2 package. A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of Jinja's sandbox being used. An attacker needs …

▾ TwilightRed Hat · Red Hat OpenShift Container Platform 4.18EPSS 0.31%via CSAF
CVE-2024-52304Medium· 5.9
1y ago

aiohttp: aiohttp vulnerable to request smuggling due to incorrect parsing of chunk extensions (CVE-2024-52304)

A flaw was found in the aiohttp package. The Python parser parses newlines in chunk extensions incorrectly, which can lead to request smuggling vulnerabilities under certain conditions. If a pure Python version of aiohttp is installed, for…

▾ SunlitRed Hat · Ansible Automation Platform Execution EnvironmentsEPSS 0.56%via CSAF
ansible_automation_platform_execution_environments vulnerabilities (CVEs) · VulnSea