Vulnerabilities of Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-42508 | Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation | 9.1 Critical | May 22, 2026 |
| CVE-2026-46595 | Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of… | 10.0 Critical | May 22, 2026 |
| CVE-2026-45829 | A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an… | 10.0 Critical | May 18, 2026 |
| CVE-2026-45736 | ws is an open source WebSocket client and server for Node.js | 4.4 Medium | May 15, 2026 |
| CVE-2026-44513 | Diffusers is the a library for pretrained diffusion models | 8.8 High | May 14, 2026 |
| CVE-2026-44484 | PyTorch Lightning is a deep learning framework to pretrain and finetune AI models | 9.3 Critical | May 14, 2026 |
| CVE-2026-42561 | Python-Multipart is a streaming multipart parser for Python | 7.5 High | May 13, 2026 |
| CVE-2026-42587 | Netty is an asynchronous, event-driven network application framework | 7.5 High | May 13, 2026 |
| CVE-2026-42584 | Netty is an asynchronous, event-driven network application framework | 7.3 High | May 13, 2026 |
| CVE-2026-42579 | Netty is an asynchronous, event-driven network application framework | 7.5 High | May 13, 2026 |
| CVE-2026-42578 | Netty is an asynchronous, event-driven network application framework | 2.9 Low | May 13, 2026 |
| CVE-2026-42581 | Netty is an asynchronous, event-driven network application framework | 5.8 Medium | May 13, 2026 |
| CVE-2026-45109 | Next.js: Middleware / Proxy bypass in App Router applications via segment-prefetch routes | 7.5 High | May 13, 2026 |
| CVE-2026-44579 | Next.js is a React framework for building full-stack web applications | 7.5 High | May 13, 2026 |
| CVE-2026-44578 | Next.js is a React framework for building full-stack web applications | 8.6 High | May 13, 2026 |
| CVE-2026-44577 | Next.js is a React framework for building full-stack web applications | 5.9 Medium | May 13, 2026 |
| CVE-2026-44574 | Next.js is a React framework for building full-stack web applications | 8.1 High | May 13, 2026 |
| CVE-2026-44575 | Next.js is a React framework for building full-stack web applications | 7.5 High | May 13, 2026 |
| CVE-2026-44573 | Next.js is a React framework for building full-stack web applications | 7.5 High | May 13, 2026 |
| CVE-2026-44432 | urllib3 is an HTTP client library for Python | 8.9 High | May 13, 2026 |
| CVE-2026-44293 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.7 High | May 13, 2026 |
| CVE-2026-44289 | protobufjs compiles protobuf definitions into JavaScript (JS) functions | 7.5 High | May 13, 2026 |
| CVE-2026-42338 | ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript | 5.3 Medium | May 12, 2026 |
| CVE-2026-42264 | Axios is a promise based HTTP client for the browser and Node.js | 7.4 High | May 8, 2026 |
| CVE-2026-33811 | When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a… | 7.5 High | May 7, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1864
Red Hat Enterprise Linux 8 1838
Red Hat Enterprise Linux 7 1501
Red Hat Enterprise Linux 10 1454
Red Hat Enterprise Linux 6 1339
Red Hat OpenShift Container Platform 4 629
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433