Aller au contenu

Vulnérabilités de Red Hat Red Hat AI Inference Server

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-25048 xgrammar is an open-source library for efficient, flexible, and portable structured generation 8.7 Élevée 5 mars 2026
CVE-2025-13327 Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials 6.3 Moyenne 27 févr. 2026
CVE-2026-25990 Pillow is a Python imaging library 8.6 Élevée 11 févr. 2026
CVE-2025-69872 DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default 9.8 Critique 11 févr. 2026
CVE-2026-22778 vLLM is an inference and serving engine for large language models (LLMs) 9.8 Critique 2 févr. 2026
CVE-2026-24779 vLLM is an inference and serving engine for large language models (LLMs) 7.1 Élevée 27 janv. 2026
CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python 8.6 Élevée 27 janv. 2026
CVE-2026-1260 Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created… 8.5 Élevée 22 janv. 2026
CVE-2026-24049 wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427 7.1 Élevée 22 janv. 2026
CVE-2026-22807 vLLM is an inference and serving engine for large language models (LLMs) 8.8 Élevée 21 janv. 2026
CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python 7.5 Élevée 16 janv. 2026
CVE-2026-21441 urllib3 is an HTTP client library for Python 8.9 Élevée 7 janv. 2026
CVE-2025-69223 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 7.5 Élevée 5 janv. 2026
CVE-2025-6242 A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's… 7.1 Élevée 7 oct. 2025
CVE-2025-6920 A flaw was found in the authentication enforcement mechanism of a model inference API in ai-inference-server 5.3 Moyenne 1 juil. 2025

Autres produits Red Hat