{"id":"EUVD-2026-81603","enisaUuid":"ae19ecd2-e531-3d6c-89a7-5ef7f62f00da","description":"vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions \u003e\u003d 3.10.0 and \u003c\u003d 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handler (lib/setup-sandbox.js), and the bridge only installs host-side rejection sanitizers when sandbox code calls .then/.catch/.finally. As a result, code running in the sandbox can invoke a host function that returns a rejected Promise (for example events.once() exposed via the NodeVM events builtin, or any embedder-provided Promise-returning API) and simply ignore the return value, leaving the host Promise unhandled so that Node.js\u0027s default unhandled-rejection behavior terminates the host process. This is an incomplete fix of GHSA-hw58-p9xv-2mjh. The issue is fixed in version 3.11.8.","datePublished":"Sep 17, 2026, 1:46:12 PM","dateUpdated":"Sep 26, 2026, 1:30:00 PM","baseScore":9.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc\nhttps://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise\n","aliases":"CVE-2026-92954\nGHSA-mgj2-jqjq-q8gg\nGHSA-gjq8-xm47-88rc\n","assigner":"VulnCheck","epss":0.49,"enisaIdProduct":[{"id":"2c092c03-fc19-3e8f-a9dc-681b2eee57a1","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"3.10.0 \u003c3.11.8"}],"enisaIdVendor":[{"id":"1bac1a14-0af7-322d-a0e3-7e9ba012884d","vendor":{"name":"patriksimek"}}],"enisaIdVulnerability":[{"id":"41ab7794-93ff-3dc5-88b4-cb6512fd3ae1","vulnerability":{"id":"GHSA-gjq8-xm47-88rc","description":"vm2: Host-returned Promise rejection can bypass vm2\u0027s unhandled-rejection hardening and terminate the host process","datePublished":"Oct 5, 2026, 10:45:48 PM","dateUpdated":"Oct 5, 2026, 10:45:48 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92954\nhttps://github.com/patriksimek/vm2/commit/5bb37f8b3f0498675a71cfa4df2b408d8ef7d4fb\nhttps://github.com/patriksimek/vm2\nhttps://github.com/patriksimek/vm2/releases/tag/v3.11.8\nhttps://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise\n","enisa_id":"EUVD-2026-81603\n","aliases":"GHSA-gjq8-xm47-88rc\nCVE-2026-92954\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:54:29 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"d21ef76d-59bc-35c8-9771-cf1096386a24","vulnerability":{"id":"GHSA-mgj2-jqjq-q8gg","description":"Duplicate Advisory: vm2: Host-returned Promise rejection can bypass vm2\u0027s unhandled-rejection hardening and terminate the host process","datePublished":"Sep 17, 2026, 3:32:16 PM","dateUpdated":"Oct 5, 2026, 10:45:31 PM","baseScore":0.0,"references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-92954\nhttps://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise\n","enisa_id":"EUVD-2026-81603\n","aliases":"GHSA-mgj2-jqjq-q8gg\n","epss":0.0,"dataProcessed":"Nov 9, 2026, 3:53:48 PM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}},{"id":"f6f7d360-40ba-36d6-aec4-2396ab626fee","vulnerability":{"id":"CVE-2026-92954","description":"vm2 is a sandbox library for running untrusted JavaScript in Node.js. In versions \u003e\u003d 3.10.0 and \u003c\u003d 3.11.7, Promises returned from the host realm into the sandbox are not marked as handled at the bridge boundary; only Promises created inside the sandbox are wrapped with a rejection-swallowing handler (lib/setup-sandbox.js), and the bridge only installs host-side rejection sanitizers when sandbox code calls .then/.catch/.finally. As a result, code running in the sandbox can invoke a host function that returns a rejected Promise (for example events.once() exposed via the NodeVM events builtin, or any embedder-provided Promise-returning API) and simply ignore the return value, leaving the host Promise unhandled so that Node.js\u0027s default unhandled-rejection behavior terminates the host process. This is an incomplete fix of GHSA-hw58-p9xv-2mjh. The issue is fixed in version 3.11.8.","datePublished":"Sep 17, 2026, 1:46:12 PM","dateUpdated":"Sep 26, 2026, 1:30:00 PM","status":"PUBLISHED","baseScore":9.2,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H","references":"https://github.com/patriksimek/vm2/security/advisories/GHSA-gjq8-xm47-88rc\nhttps://www.vulncheck.com/advisories/vm2-3.10.0-through-3.11.5-denial-of-service-via-host-promise\n","enisa_id":"EUVD-2026-81603\n","assigner":"VulnCheck","epss":0.49,"dataProcessed":"Nov 11, 2026, 7:25:41 AM","vulnerabilityProduct":[{"id":"a4665368-7b4e-334f-a25f-c61ecec27b86","product":{"name":"vm2","vendor":{"name":"patriksimek"}},"product_version":"3.10.0 \u003c3.11.8"}],"vulnerabilityVendor":[{"id":"52814965-b0f4-3386-a4f0-8c1554315820","vendor":{"name":"patriksimek"}}]}}],"enisaIdAdvisory":[{"id":"03bd75b0-ce64-3dd2-914c-d14db9f18049","advisory":{"id":"RHSA-2026:79088","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 release.","summary":"Red Hat Developer Hub 1.10.5 has been released.","datePublished":"Oct 8, 2026, 7:56:41 AM","dateUpdated":"Nov 7, 2026, 2:47:06 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:79088\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_79088.json\n","aliases":"CVE-2026-13697\nCVE-2026-14456\nCVE-2026-18798\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-55553\nCVE-2026-63072\nCVE-2026-63076\nCVE-2026-67213\nCVE-2026-67214\nCVE-2026-67422\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-77078\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84445\nCVE-2026-84961\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"06cbcb1e-68b7-35e4-a7c7-453d95844710","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:f71a2783106a98ccbfb60f7219f8220cc778da946f0a800c2ce1d66384ed947a_amd64","vendor":{"name":"Red Hat"}}},{"id":"508477c2-1363-394b-bb5d-3facad96d5d0","product":{"name":"registry.redhat.io/rhdh/rhdh-rag-content-rhel9@sha256:2f71e0edb79f26d812edeb1754075159c9c9a0c8250c4d542e83a0725ad60725_amd64","vendor":{"name":"Red Hat"}}},{"id":"5636929f-17b0-3759-a7fe-08ca34a667d5","product":{"name":"registry.redhat.io/rhdh/rhdh-must-gather-rhel9@sha256:38374b57f1896ba7be54a5778ba55aa0e6766443c5421c6481a82f909cfacc51_amd64","vendor":{"name":"Red Hat"}}},{"id":"c2b0f25d-cb2e-34af-9e75-f837cebc386c","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:0f02ae0b8405912741a180af1c290feac2003e69d062bec9c7cd5d13f8732dc9_amd64","vendor":{"name":"Red Hat"}}},{"id":"cafb57df-e384-35d1-be1d-0e564954cb14","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:a20e789a899fcf4918db20426fce1d3d865391e7dee7c5c50e31533fbdd51fa0_amd64","vendor":{"name":"Red Hat"}}},{"id":"e910d332-380a-3bb6-bece-c3366490900c","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}}]}},{"id":"130825d6-d0b0-3fa8-aae2-5136905c1f97","advisory":{"id":"WID-SEC-W-2026-3071","description":"vm2: Mehrere Schwachstellen","summary":"Ein Angreifer kann mehrere Schwachstellen in vm2 ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, Sicherheitsmaßnahmen zu umgehen, Daten offenzulegen oder zu manipulieren oder einen Denial-of-Service-Zustand auszulösen.","datePublished":"Aug 27, 2026, 10:00:00 PM","dateUpdated":"Oct 27, 2026, 11:00:00 PM","baseScore":0.0,"references":"https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3071.json\nhttps://wid.cert-bund.de/portal/wid/securityadvisory?name\u003dWID-SEC-2026-3071\n","aliases":"CVE-2026-92933\nCVE-2026-92934\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92959\nCVE-2026-92936\n","source":{"id":8,"name":"csaf_certbund"},"advisoryProduct":[{"id":"39da24a4-3073-370a-a133-1f8bc3dcf02a","product":{"name":"Red Hat Enterprise Linux","vendor":{"name":"Red Hat"}}},{"id":"8637d0d4-8f2a-3ba6-9ebe-771f8949da09","product":{"name":"3.11.8","vendor":{"name":"open source"}}},{"id":"c154c1c6-a11a-3f04-ae60-66d5fbf83e25","product":{"name":"vm2","vendor":{"name":"patriksimek"}}}]}},{"id":"20b84c56-54d3-3387-93ad-b36c966ffb57","advisory":{"id":"RHSA-2026:82151","description":"Red Hat Security Advisory: Ansible automation portal Red Hat Enterprise Linux Images","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for the Red Hat Ansible Automation Portal bootable container image.","datePublished":"Oct 13, 2026, 10:07:59 AM","dateUpdated":"Nov 10, 2026, 2:11:32 PM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:82151\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_82151.json\n","aliases":"CVE-2026-13697\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-54284\nCVE-2026-55553\nCVE-2026-59893\nCVE-2026-71491\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84961\nCVE-2026-88932\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"2280b8dc-2fd5-30b0-8231-555177763c6b","product":{"name":"registry.redhat.io/ansible-automation-platform/bootc-automation-portal-rhel9@sha256:8553c734145775879bdfe2befa9f2df1c22c6d7db2f2251401c3cc517a7e0394_amd64","vendor":{"name":"Red Hat"}}},{"id":"e47d596f-4737-3e57-a985-a89840767fcd","product":{"name":"Red Hat Ansible Automation Platform 2.2","vendor":{"name":"Red Hat"}}}]}},{"id":"504e2477-f4f5-3c74-b4fe-23546e645b87","advisory":{"id":"RHSA-2026:80644","description":"Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.2, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Oct 12, 2026, 8:11:19 AM","dateUpdated":"Nov 7, 2026, 5:57:42 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:80644\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80644.json\n","aliases":"CVE-2026-47686\nCVE-2026-47698\nCVE-2026-84961\nCVE-2026-85152\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92960\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-101916\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"72ca4aa8-50b6-3673-8001-4b7805b5a019","product":{"name":"Red Hat Ansible Automation Platform 2.2","vendor":{"name":"Red Hat"}}},{"id":"8d3bba85-f3ae-3273-847b-179b70760554","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:cd22d7068dc9cdc475f4cb097b9019f54d5adf51927a3773c483040224018e96_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"70dea681-e378-3570-8437-d101b71e2bb5","advisory":{"id":"RHSA-2026:76788","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.10.5 Plugin Catalog GA plugins release.","summary":"Red Hat Developer Hub 1.10.5 Plugin Catalog GA plugins release.","datePublished":"Oct 6, 2026, 1:09:32 PM","dateUpdated":"Nov 7, 2026, 11:43:31 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:76788\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_76788.json\n","aliases":"CVE-2026-13697\nCVE-2026-19534\nCVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-55553\nCVE-2026-75899\nCVE-2026-75931\nCVE-2026-75975\nCVE-2026-76172\nCVE-2026-77037\nCVE-2026-77078\nCVE-2026-77413\nCVE-2026-77414\nCVE-2026-77415\nCVE-2026-82333\nCVE-2026-82417\nCVE-2026-84292\nCVE-2026-84375\nCVE-2026-84394\nCVE-2026-84961\nCVE-2026-87776\nCVE-2026-88932\nCVE-2026-89011\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"180d3269-d15f-343c-82e8-83cb197e3acc","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend-module-loki@sha256:5549940696691cc087777c20f5d46b485d31e9fe3db896caa2eca7bfef3edb72_amd64","vendor":{"name":"Red Hat"}}},{"id":"49d020b5-3790-3915-8a55-d6e6d709f5f8","product":{"name":"Red Hat Developer Hub 1.10","vendor":{"name":"Red Hat"}}},{"id":"57ffb8cd-cfbe-3f7e-9c00-85aee590bf45","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-backend@sha256:c6a5e6d9c8f3ab900c2b29848273540f4a3e97d351faa338a66da46c0b59d04f_amd64","vendor":{"name":"Red Hat"}}},{"id":"9fc9309a-ed78-376e-9e98-7d17f6b24ec7","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator@sha256:3aa39a8c3b7bf33aeaae5b3f924d0a2f7625e64657ce9b5517a3a73620f142bb_amd64","vendor":{"name":"Red Hat"}}},{"id":"b7170e41-a20c-34cb-af94-29802c6e7b5f","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed-backend@sha256:55b8b4e43f9dd474dee53d824591695012994daec86efee4dc08612b12425a46_amd64","vendor":{"name":"Red Hat"}}},{"id":"c0c3bef5-d9ee-3d1c-ae0d-0baec98a55b0","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-scaffolder-backend-module-orchestrator@sha256:924c4e5e8642438f3099272ff7edd746a66fcec4779aeafb9fd6b3ae0c594f72_amd64","vendor":{"name":"Red Hat"}}},{"id":"e4e2cfac-97a6-3481-8285-5dfb16156229","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-orchestrator-form-widgets@sha256:df55fd567640bcd54d8e0d19baa97a5e72429865ad342c94bb80c3a49a5c184e_amd64","vendor":{"name":"Red Hat"}}},{"id":"feec8110-5ed4-3c49-8e16-23feb910d9bc","product":{"name":"registry.redhat.io/rhdh/red-hat-developer-hub-backstage-plugin-lightspeed@sha256:0ca07bd2b15a85bfda16cbc0904fb4ee6c8620e18b891ba89ae792cf0a165095_amd64","vendor":{"name":"Red Hat"}}}]}},{"id":"8ab96826-e314-3588-9926-634772d8e72f","advisory":{"id":"RHSA-2026:91651","description":"Red Hat Security Advisory: Red Hat Developer Hub 1.9.10 release.","summary":"Red Hat Developer Hub 1.9.10 has been released.","datePublished":"Oct 28, 2026, 11:50:38 AM","dateUpdated":"Nov 11, 2026, 3:37:19 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:91651\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_91651.json\n","aliases":"CVE-2026-47683\nCVE-2026-47686\nCVE-2026-47698\nCVE-2026-84445\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92942\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92955\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92958\nCVE-2026-92959\nCVE-2026-92960\nCVE-2026-92961\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-111943\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"21fa6397-f7cf-3dcd-bfac-1b35c37b3cc2","product":{"name":"registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:b468b182954d3554b9b8934b65418233502ca24feb0ff66454c5f05e8055e35f_amd64","vendor":{"name":"Red Hat"}}},{"id":"ac6c8622-7e0c-3b6c-8cac-bf787eefa089","product":{"name":"registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:9dffcd643d4a9d3d5cea982ccec08cf50198920d9a08672c7b29994120d3e4fa_amd64","vendor":{"name":"Red Hat"}}},{"id":"d1d295ca-6505-31da-b8b3-5e30e16c3a0a","product":{"name":"registry.redhat.io/rhdh/rhdh-operator-bundle@sha256:bbb5c34eb78780efa7168ae8d53a711a121174c5d7b4ec5f1a9187aba6f9e7ab_amd64","vendor":{"name":"Red Hat"}}},{"id":"f63c7ed2-2550-3b7b-b138-a121fa8b5b4f","product":{"name":"Red Hat Developer Hub 1.9","vendor":{"name":"Red Hat"}}}]}},{"id":"fc45888e-3b60-329e-b39a-3052b5671b58","advisory":{"id":"RHSA-2026:80603","description":"Red Hat Security Advisory: Ansible plug-ins for Red Hat Developer Hub Product Release Update","summary":"Updated images are now available for Red Hat Ansible Automation Platform 2.1, which include new features, bug fixes, and enhancements for Red Hat Ansible Automation Platform integration with Red Hat Developer Hub.","datePublished":"Oct 12, 2026, 5:44:41 AM","dateUpdated":"Nov 7, 2026, 5:57:42 AM","baseScore":0.0,"references":"https://access.redhat.com/errata/RHSA-2026:80603\nhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_80603.json\n","aliases":"CVE-2026-47686\nCVE-2026-47698\nCVE-2026-84961\nCVE-2026-85152\nCVE-2026-92934\nCVE-2026-92935\nCVE-2026-92937\nCVE-2026-92938\nCVE-2026-92939\nCVE-2026-92940\nCVE-2026-92941\nCVE-2026-92944\nCVE-2026-92946\nCVE-2026-92947\nCVE-2026-92948\nCVE-2026-92950\nCVE-2026-92951\nCVE-2026-92953\nCVE-2026-92954\nCVE-2026-92956\nCVE-2026-92957\nCVE-2026-92960\nCVE-2026-93603\nCVE-2026-93604\nCVE-2026-93605\nCVE-2026-93606\nCVE-2026-101916\n","source":{"id":9,"name":"csaf_redhat"},"advisoryProduct":[{"id":"345f9be6-2f62-3563-b654-79433799673a","product":{"name":"Red Hat Ansible Automation Platform 2.1","vendor":{"name":"Red Hat"}}},{"id":"d435b4ca-d802-3415-ba8a-e311b1155a03","product":{"name":"registry.redhat.io/ansible-automation-platform/automation-portal@sha256:f92d478c1fad9df93d573b3a4d4cc5904f57f33d65a308472265c8bfeb057f59_amd64","vendor":{"name":"Red Hat"}}}]}}]}