VDB
RHSA-2026%3A13553
RHSA-2026%3A13553
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in aiohttp, an asynchronous HTTP client/server framework for Python. A remote attacker could exploit this vulnerability by sending a specially crafted POST request to an application using the Request.post() method, provided that Python optimizations are enabled. This could lead to an infinite loop, resulting in a Denial of Service (DoS) attack, making the affected application unavailable.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/ansible-automation-platform-25/gateway-proxy-rhel8@sha256:d096299ccb0569ba260224b713505382849aec3e2d1cfa08a97b460fcf4e1e02_s390x as a component of Red Hat Ansible Automation Platform 2.5 | *, registry.redhat.io/ansible-automation-platform-25/gateway-proxy-rhel8@sha256:d096299ccb0569ba260224b713505382849aec3e2d1cfa08a97b460fcf4e1e02_s390x, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/gateway-rhel8-operator@sha256:aa7f2073a9f0fe854436c18478efc41421d70d6192749efba65cd2caf791371a_arm64 as a component of Red Hat Ansible Automation Platform 2.5 | *, *, registry.redhat.io/ansible-automation-platform-25/gateway-rhel8-operator@sha256:aa7f2073a9f0fe854436c18478efc41421d70d6192749efba65cd2caf791371a_arm64 |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:f6b0c62b35bd4ed6ae4cacaa5d08ded9e0403cec4cc586fd205bcb71ac7bfc9a_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 | *, *, registry.redhat.io/ansible-automation-platform-25/ansible-python-base-rhel8@sha256:f6b0c62b35bd4ed6ae4cacaa5d08ded9e0403cec4cc586fd205bcb71ac7bfc9a_ppc64le |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:00ee4300bc6c059bd48da2d46b7dfc928ba8be6d6d313dbb551559bdb76acb40_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | *, registry.redhat.io/ansible-automation-platform-25/ansible-python-toolkit-rhel8@sha256:00ee4300bc6c059bd48da2d46b7dfc928ba8be6d6d313dbb551559bdb76acb40_amd64, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:e8a06fef6949e57ee62aec89bed4a24cbcd2226710aad99e6c751dab18050afa_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:e8a06fef6949e57ee62aec89bed4a24cbcd2226710aad99e6c751dab18050afa_amd64, *, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:1e5786ac9dc6ba99af93a08a4b927c09cfcd7dc389100ba979094f6579fb481d_arm64 as a component of Red Hat Ansible Automation Platform 2.5 | *, *, registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:1e5786ac9dc6ba99af93a08a4b927c09cfcd7dc389100ba979094f6579fb481d_arm64 |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:dbb7cffb582b6073c2d1d15fd8b3cb4b0e3dbd88871c35ebe87fe480530cc8c4_s390x as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:dbb7cffb582b6073c2d1d15fd8b3cb4b0e3dbd88871c35ebe87fe480530cc8c4_s390x, *, registry.redhat.io/ansible-automation-platform-25/aap-must-gather-rhel8@sha256:dbb7cffb582b6073c2d1d15fd8b3cb4b0e3dbd88871c35ebe87fe480530cc8c4_s390x |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/de-supported-rhel8@sha256:90fc3d8bde025ae8680269980d0d5336baafc93aeae0478702e3594cbbc17ee2_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/de-supported-rhel8@sha256:90fc3d8bde025ae8680269980d0d5336baafc93aeae0478702e3594cbbc17ee2_amd64, *, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/eda-controller-rhel8@sha256:653e3a35c2d8659ccfec0dc0747505ea133ab9951e35f0342e1c1e4272182f53_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/eda-controller-rhel8@sha256:653e3a35c2d8659ccfec0dc0747505ea133ab9951e35f0342e1c1e4272182f53_amd64, *, registry.redhat.io/ansible-automation-platform-25/eda-controller-rhel8@sha256:653e3a35c2d8659ccfec0dc0747505ea133ab9951e35f0342e1c1e4272182f53_amd64 |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/controller-rhel8-operator@sha256:66586f6c269e34a9a1de9d96bb90ed09f4384385d767f5fae988499855afaa7f_s390x as a component of Red Hat Ansible Automation Platform 2.5 | *, *, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/gateway-rhel8@sha256:b1845f6aa8cace795360d727e998ea371aae2bebbd5aaf757923304a3de17984_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 | *, registry.redhat.io/ansible-automation-platform-25/gateway-rhel8@sha256:b1845f6aa8cace795360d727e998ea371aae2bebbd5aaf757923304a3de17984_ppc64le, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:89686191015453d93dda8818895cf5df85ba20afb8cfca929f8bd7f9d5c68d96_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:89686191015453d93dda8818895cf5df85ba20afb8cfca929f8bd7f9d5c68d96_amd64, *, * |
| Red Hat | Red Hat Ansible Automation Platform 2.5 | |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:63b9fd19a0e7f34f265d58c8cece765568558e77154f716308878c67d00e8341_s390x as a component of Red Hat Ansible Automation Platform 2.5 | *, registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:63b9fd19a0e7f34f265d58c8cece765568558e77154f716308878c67d00e8341_s390x, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:729b70a950dfe232b51e76a41aa7e3601443b0d9f522a44ebdca3a87667c9464_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | *, registry.redhat.io/ansible-automation-platform-25/lightspeed-rhel8@sha256:729b70a950dfe232b51e76a41aa7e3601443b0d9f522a44ebdca3a87667c9464_amd64, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8@sha256:ceec32f75ff6107896e5760eeb78fa2a053881caffd386bfdcbb5817f2e22718_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8@sha256:ceec32f75ff6107896e5760eeb78fa2a053881caffd386bfdcbb5817f2e22718_amd64, *, registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8@sha256:ceec32f75ff6107896e5760eeb78fa2a053881caffd386bfdcbb5817f2e22718_amd64 |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:0b90b184be8b91ba0429aab99151f6fde8b58197f50379876e354e66a567e044_arm64 as a component of Red Hat Ansible Automation Platform 2.5 | *, registry.redhat.io/ansible-automation-platform-25/de-minimal-rhel8@sha256:0b90b184be8b91ba0429aab99151f6fde8b58197f50379876e354e66a567e044_arm64, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8@sha256:e2a1ccde8fa30d56e5c2ab90426d7f868bc7cd07e09f13c9342c046741923127_ppc64le as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8@sha256:e2a1ccde8fa30d56e5c2ab90426d7f868bc7cd07e09f13c9342c046741923127_ppc64le, *, registry.redhat.io/ansible-automation-platform-25/ee-minimal-rhel8@sha256:e2a1ccde8fa30d56e5c2ab90426d7f868bc7cd07e09f13c9342c046741923127_ppc64le |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:8c0908022fc3e47059b25b8927201256b331272a018a584a50803e735262c82e_s390x as a component of Red Hat Ansible Automation Platform 2.5 | registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:8c0908022fc3e47059b25b8927201256b331272a018a584a50803e735262c82e_s390x, registry.redhat.io/ansible-automation-platform-25/controller-rhel8@sha256:8c0908022fc3e47059b25b8927201256b331272a018a584a50803e735262c82e_s390x, * |
| Red Hat | registry.redhat.io/ansible-automation-platform-25/gateway-rhel8-operator@sha256:417c27992f86d53d9d7ea1cc22c3c599764183bc4e3fea2f3a01ad586adaf970_amd64 as a component of Red Hat Ansible Automation Platform 2.5 | *, *, * |
…and 86 more
Timeline
- May 4, 2026 CVE Published
- May 5, 2026 Distribution Patch
- May 5, 2026 Distribution Patch
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
- May 5, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:13553 advisory
- https://access.redhat.com/security/cve/CVE-2025-69227 advisory
- https://access.redhat.com/security/cve/CVE-2026-23490 advisory
- https://access.redhat.com/security/cve/CVE-2026-26007 advisory
- https://access.redhat.com/security/cve/CVE-2026-27459 advisory
- https://access.redhat.com/security/cve/CVE-2026-29074 advisory
- https://access.redhat.com/security/cve/CVE-2026-30922 advisory
- https://access.redhat.com/security/cve/CVE-2026-32274 advisory
- https://access.redhat.com/security/cve/CVE-2026-32597 advisory
- https://access.redhat.com/security/cve/CVE-2026-33154 advisory
- https://access.redhat.com/security/cve/CVE-2026-4800 advisory
- https://access.redhat.com/security/updates/classification/ advisory
- https://docs.redhat.com/en/documentation/red_hat_ansible_automation_platform/2.5/html/release_notes/patch_releases advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13553.json advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2427256 issue
- https://www.cve.org/CVERecord?id=CVE-2025-69227 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-69227 advisory
- https://github.com/aio-libs/aiohttp/commit/bc1319ec3cbff9438a758951a30907b072561259 advisory
- https://github.com/aio-libs/aiohttp/security/advisories/GHSA-jj3x-wxrx-4x23 advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2453496 issue
…and 48 more