Vulnérabilités de Red Hat Exploit Intelligence

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-121837	Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort	4.3 Moyenne	6 nov. 2026
CVE-2026-107912	Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw	7.7 Élevée	5 nov. 2026
CVE-2026-114236	storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…	3.3 Faible	21 oct. 2026
CVE-2026-87744	A flaw was found in Quarkus REST Data Panache	9.1 Critique	12 oct. 2026
CVE-2026-94451	Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities	6.5 Moyenne	12 oct. 2026
CVE-2026-94449	Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service	7.5 Élevée	21 sept. 2026
CVE-2026-93432	Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus	6.1 Moyenne	18 sept. 2026
CVE-2026-87743	A flaw was found in Quarkus HTTP security	7.5 Élevée	18 sept. 2026
CVE-2026-87742	A flaw was found in quarkus-websockets-next	7.5 Élevée	17 sept. 2026
CVE-2026-81829	A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed…	5.3 Moyenne	17 sept. 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critique	22 juin 2026
CVE-2026-49468	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.5 Critique	22 juin 2026
CVE-2026-54293	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…	7.5 Élevée	22 juin 2026
CVE-2026-12773	A weakness has been identified in BerriAI litellm up to 1.59.8	6.9 Moyenne	21 juin 2026
CVE-2026-48818	Starlette is a lightweight ASGI framework/toolkit	7.5 Élevée	17 juin 2026
CVE-2026-41567	Moby is an open source container framework	7.2 Élevée	5 juin 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Moyenne	2 juin 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Moyenne	1 juin 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Moyenne	28 mai 2026
CVE-2026-48710	Exploitée Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Moyenne	26 mai 2026
CVE-2026-44209	Banks generates meaningful LLM prompts using a template language that makes sense	7.5 Élevée	26 mai 2026
CVE-2026-47102	LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint	8.7 Élevée	21 mai 2026
CVE-2026-47101	LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their…	8.7 Élevée	21 mai 2026
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 Élevée	13 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026

Autres produits Red Hat