RHSA-2026:34366: dynflow-utils Red Hat

CVSS: 8.8v3.1HighPublished

Published 02-07-2026Last modified 20-10-2026

Open JSON

Vulnerability summary

RHSA-2026:34366 is a high (CVSS 8.8) vulnerability in dynflow-utils Red Hat.

Overall risk

35/100

0100

Medium · default modelHow is this calculated?

CVSS score

8.8/10

010

High · v3.1 (OSV · Red hat), selected by version preference

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Advisory lineage

Upstream 6 · Downstream 0 · Related 1

CVE-2026-32282 CVE-2026-40192 CVE-2026-5135 CVE-2026-5136 CVE-2026-5138 CVE-2026-5142

Timeline

02-07-2026
PublishedVulnerability first disclosed.
20-10-2026
Last modifiedVulnerability information updated.

Description

Red Hat Security Advisory: Satellite 6.17.9 Async Update

CVSS metrics

1 score · 1 source · 1 version

v3.18.8

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Redhat21 products

dynflow-utils< 0:1.6.3-1.1.el9sat
foreman< 0:3.14.0.17-1.el9sat
foreman-cli< 0:3.14.0.17-1.el9sat
foreman-debug< 0:3.14.0.17-1.el9sat
foreman-dynflow-sidekiq< 0:3.14.0.17-1.el9sat

Show all 21

1 vendor · 21 products

References

37 links

access.redhat.com/errata/RHSA-2026:34366Advisory
access.redhat.com/security/updates/classification/ARTICLE
bugzilla.redhat.com/show_bug.cgi?id=2452230REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452970REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452971REPORT
bugzilla.redhat.com/show_bug.cgi?id=2452999REPORT
bugzilla.redhat.com/show_bug.cgi?id=2456336REPORT
bugzilla.redhat.com/show_bug.cgi?id=2458856REPORT
issues.redhat.com/browse/SAT-44719ARTICLE
issues.redhat.com/browse/SAT-45923ARTICLE

Show all 37 references

security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_34366.jsonAdvisory
access.redhat.com/security/cve/CVE-2026-5135REPORT
www.cve.org/CVERecord?id=CVE-2026-5135Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5135Advisory
access.redhat.com/security/cve/CVE-2026-5136REPORT
www.cve.org/CVERecord?id=CVE-2026-5136Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5136Advisory
access.redhat.com/security/cve/CVE-2026-5138REPORT
www.cve.org/CVERecord?id=CVE-2026-5138Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5138Advisory
access.redhat.com/security/cve/CVE-2026-5142REPORT
www.cve.org/CVERecord?id=CVE-2026-5142Advisory
nvd.nist.gov/vuln/detail/CVE-2026-5142Advisory
access.redhat.com/security/cve/CVE-2026-32282REPORT
www.cve.org/CVERecord?id=CVE-2026-32282Advisory
nvd.nist.gov/vuln/detail/CVE-2026-32282Advisory
go.dev/cl/763761ARTICLE
go.dev/issue/78293ARTICLE
groups.google.com/g/golang-announce/c/0uYbvbPZRWUARTICLE
pkg.go.dev/vuln/GO-2026-4864Advisory
access.redhat.com/security/cve/CVE-2026-40192REPORT
www.cve.org/CVERecord?id=CVE-2026-40192Advisory
nvd.nist.gov/vuln/detail/CVE-2026-40192Advisory
github.com/python-pillow/Pillow/commit/3cb854e8b2bab43f40e342e665f9340d861aa628ARTICLE
github.com/python-pillow/Pillow/pull/9521ARTICLE
github.com/python-pillow/Pillow/security/advisories/GHSA-whj4-6x5x-4v2jARTICLE
pillow.readthedocs.io/en/stable/releasenotes/12.2.0.htmlARTICLE