Vulnerabilities of Red Hat Red Hat OpenShift AI 3.4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-44724	systeminformation is a System and OS information library for node.js	7.8 High	May 27, 2026
CVE-2026-48710	Exploited Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Medium	May 26, 2026
CVE-2026-42013	Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name	8.2 High	May 26, 2026
CVE-2026-42015	Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling	5.3 Medium	May 26, 2026
CVE-2026-42012	A flaw was found in gnutls	7.1 High	May 26, 2026
CVE-2026-5260	Gnutls: gnutls: information disclosure via heap overread in rsa key exchange	8.2 High	May 26, 2026
CVE-2026-48864	Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data	7.8 High	May 26, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critical	May 22, 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 High	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Medium	May 22, 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Medium	May 22, 2026
CVE-2026-42009	Gnutls: gnutls: denial of service via dtls packet reordering vulnerability	7.5 High	May 18, 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Medium	May 15, 2026
CVE-2026-44513	Diffusers is the a library for pretrained diffusion models	8.8 High	May 14, 2026
CVE-2026-42266	JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…	8.8 High	May 13, 2026
CVE-2026-42557	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…	8.6 High	May 13, 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 High	May 13, 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-2614	A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions…	7.5 High	May 11, 2026
CVE-2026-42271	Exploited BerriAI LiteLLM Command Injection Vulnerability	8.7 High	May 8, 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	May 8, 2026

Other Red Hat products