https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-9909.htmlhttps://patchthecve.com/cve/CVE-2025-9909.htmlWed, 17 Jun 2026 10:10:02 +0000MEDIUM 6.7: A flaw was found in the Red Hat Ansible Automation Platform Gateway route creation component. This vulnerability allows credential theft via the creation of misleading routes using a double-slash (//) prefix in the gateway_path. A malicious or socially engineered administrator can configure a honey-https://patchthecve.com/cve/CVE-2025-9908.htmlhttps://patchthecve.com/cve/CVE-2025-9908.htmlWed, 17 Jun 2026 10:10:02 +0000MEDIUM 6.7: A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Streams. This vulnerability allows an authenticated user to gain access to sensitive internal infrastructure headers (such as X-Trusted-Proxy and X-Envoy-*) and event stream URLs via crafted requests and johttps://patchthecve.com/cve/CVE-2025-9907.htmlhttps://patchthecve.com/cve/CVE-2025-9907.htmlWed, 17 Jun 2026 10:10:00 +0000MEDIUM 6.7: A flaw was found in the Red Hat Ansible Automation Platform, Event-Driven Ansible (EDA) Event Stream API. This vulnerability allows exposure of sensitive client credentials and internal infrastructure headers via the test_headers field when an event stream is in test mode. The possible outcome incluhttps://patchthecve.com/cve/CVE-2024-10033.htmlhttps://patchthecve.com/cve/CVE-2024-10033.htmlWed, 17 Jun 2026 06:54:48 +0000MEDIUM 6.1: A vulnerability was found in aap-gateway. A Cross-site Scripting (XSS) vulnerability exists in the gateway component. This flaw allows a malicious user to perform actions that impact users by using the "?next=" in a URL, which can lead to redirecting, injecting malicious script, stealing sessions an