RHSA-2026:3962HighCVSS 8.8

Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.5 Container Release Update

Published
March 6, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (5)

CVE-2026-1207 →CVE-2026-1287 →CVE-2026-1312 →CVE-2025-13465 →CVE-2025-61140 →

📋 Description

CVE-2025-13465 — lodash: prototype pollution in _.unset and _.omit functions CVE-2025-61140 — jsonpath: jsonpath: Prototype Pollution vulnerability in the value function CVE-2026-1207 — Django: Django: SQL Injection via RasterField band index parameter CVE-2026-1287 — Django: Django: SQL Injection via crafted column aliases CVE-2026-1312 — Django: Django: SQL injection via crafted column aliases in QuerySet.order_by()

🎯 Affected products107

  • Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:70db5665a512e8fbe7270cd5194ebe8a12d5e0a6f6e3fd407485e10df8705583_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:7dd164d42df58670693240dd2d68cc9bf90b41023e5e9295f55a0b148daf6e45_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:9a8067491bcb374f4572866034c8acbdc8f441416ffd4d4391b94d4a29cb60aa_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:9b36f7f8d02f1eb3c6fd6e5b966e177e91e609fc9cacf126d0cf25f2865f7386_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:25dc04664e7e2be4b31c85106b271edd07b5d283a0b4286266894e12a7dd0979_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:5cad40f0a5c5aff19e775c7a08dc89586e542302085d44fcb911eb7af1657bb6_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:7b277cf611f7f80d867178d591ed57277efa14b9c6ba9ef330df511c68f17830_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-builder-rhel8@sha256:7f0aa9504c3bfcff51830b7e9f301389be3c696bcade6761124b2becd7c7ffa8_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:28cc736807b70f8b7cd46a550ead4c1494f3c1a10877ea3ad321316a99387829_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:326da6f05fc2621f7ff6436f97be84f582ff8f4ddbbc6aa7955cc5fd2c9b90a8_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:923d8f89edca666ae8a0efa382f4ed48ef9c7b9b74ae686970a7a0a586ae7584_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-dev-tools-rhel8@sha256:d330c9add25c6132348dcccfc6c70e4f68e306fd36622b987818de5b7efbcc73_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:1768fc9a526b479a35fb0ba7ab4c6a4abc6a30faa881a2df06453b281c3362e0_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:bc7e4edb4e18d321f1e4278cbb49f9d7d0ca774948c6a695e3de8f2f5f52b443_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:e552353e1c27b011b25c5f2bb1458202178c0a04167ba2172a6e518ee5df9db1_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:e9df1a884a008083269748a5eb6aa150e0b7fffd21a1ba809424e3367819a34a_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:7dad8106515dd0fc4aeb7ab377a81e5c8c5094bf235f009bf8c23235ca80f796_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:b336ab95cbe10a4c5b3c1006c00efa0b12ab96360a712a7fe11c0acad88bb942_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:d969b7f9b265fe2b07ff8ea889d628fd1d53dc4ec31e34c85d8b64cd3735a9c6_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:ec317c66c7365a9ac76bf3d996702fddc324bbd5cbce2ab2d66369d4b69312dc_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:06a1042506c89a192a6c7fbea44874766d4a38762434feec21862a0d0f8bfc4d_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:16800ddcdd380c9ddec6eedab4e98f0592c829f125ce8b8424d0a6d20667f2f6_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:815233354e1c1db61109ecd6ee806662a6f1547f6004b351b9ef2475a7ee9394_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:fa83ddff1fbebe669ad352b41ae3176f34e2b4dcc0a44edf80367827f1b7892d_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:013396cf70b85e5c2ad96ef46c36ad5d1e11a8c4783c281d7e85ef2c6b5e5126_amd64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:237bb93566255704659fe1738d74f8a6d3f29f577853006fd38571319f082859_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:64475c42c182b0a3cd8549bbee7d19beaf3433cba71a31bdb6e64e286bb19193_ppc64le as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:a2a957da0076677656e19f3bc99290a91007bf6de9afde2a100dfce6fa3a01b6_arm64 as a component of Red Hat Ansible Automation Platform 2.5
  • registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:1c062ddd893499d7126c7e2fc14f9915f27e7e6809bd469382293e85bdc3e00e_s390x as a component of Red Hat Ansible Automation Platform 2.5
  • +77 more not shown

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5#Upgrading Workaround: To mitigate this issue, implement strict input validation before passing any property paths to the _.unset and _.omit functions to block attempts to access the prototype chain. Ensure that strings like __proto__, constructor and prototype are blocked, for example. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (9)