Vulnerabilities of Red Hat Red Hat AI Inference Server

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 High	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-43868	Memory Allocation with Excessive Size Value vulnerability in Apache Thrift	Not rated	May 5, 2026
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Not rated	May 5, 2026
CVE-2026-41607	Out-of-bounds Read vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41606	Uncontrolled Recursion vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41605	Integer Overflow or Wraparound vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41604	Out-of-bounds Read vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41603	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Not rated	Apr 28, 2026
CVE-2026-41602	Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue…	Not rated	Apr 28, 2026
CVE-2025-48431	Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings	Not rated	Apr 28, 2026
CVE-2026-40192	Pillow is a Python imaging library	8.7 High	Apr 15, 2026
CVE-2026-6385	A flaw was found in FFmpeg	6.5 Medium	Apr 15, 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Medium	Apr 8, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-34756	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Medium	Apr 6, 2026
CVE-2026-34755	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Medium	Apr 6, 2026
CVE-2026-27893	vLLM is an inference and serving engine for large language models (LLMs)	8.8 High	Mar 26, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-30922	pyasn1 is a generic ASN.1 library for Python	7.5 High	Mar 18, 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 High	Mar 12, 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 High	Mar 12, 2026
CVE-2026-25960	vLLM is an inference and serving engine for large language models (LLMs)	7.1 High	Mar 9, 2026

Other Red Hat products