automation-eda-controller vulnerabilities

CVEs whose affected-version data names the automation-eda-controller package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-106033Medium· 5.4

yesterday

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route

A DOM-based Cross-Site Scripting (XSS) vulnerability exists in the Ansible Platform UI due to unvalidated input handling within the application's redirect route. Specifically, the application extracts a target destination from the next q…

▾ SunlitRed Hat · ansible-automation-platform-24/lightspeed-rhel8via NVD