Aller au contenu

Vulnérabilités de Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-39820 Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion… 7.5 Élevée 7 mai 2026
CVE-2026-42499 Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322 7.5 Élevée 7 mai 2026
CVE-2026-33814 When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it… 7.5 Élevée 7 mai 2026
CVE-2026-6322 fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them… 7.5 Élevée 5 mai 2026
CVE-2026-43868 Memory Allocation with Excessive Size Value vulnerability in Apache Thrift Non notée 5 mai 2026
CVE-2026-41607 Out-of-bounds Read vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41606 Uncontrolled Recursion vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41605 Integer Overflow or Wraparound vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41604 Out-of-bounds Read vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41603 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne 24 avr. 2026
CVE-2026-42041 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 24 avr. 2026
CVE-2026-42043 Axios is a promise based HTTP client for the browser and Node.js 7.2 Élevée 24 avr. 2026
CVE-2026-42044 Axios is a promise based HTTP client for the browser and Node.js 6.5 Moyenne 24 avr. 2026
CVE-2026-42033 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 24 avr. 2026
CVE-2026-6859 A flaw was found in InstructLab 8.8 Élevée 22 avr. 2026
CVE-2026-6855 A flaw was found in InstructLab 7.1 Élevée 22 avr. 2026
CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… 6.9 Moyenne 21 avr. 2026
CVE-2026-6654 Double-Free / Use-After-Free (UAF) in the `IntoIter::drop` and `ThinVec::clear` functions in the thin_vec crate 5.1 Moyenne 20 avr. 2026
CVE-2026-41242 protobufjs compiles protobuf definitions into JavaScript (JS) functions 9.4 Critique 18 avr. 2026
CVE-2026-6385 A flaw was found in FFmpeg 6.5 Moyenne 15 avr. 2026
CVE-2026-33806 Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed… 7.5 Élevée 15 avr. 2026
CVE-2026-6100 Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a… 9.1 Critique 13 avr. 2026
CVE-2019-25695 R 3.4.4 contains a local buffer overflow vulnerability that allows attackers to execute arbitrary code by injecting… 8.6 Élevée 12 avr. 2026
CVE-2026-40175 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 10 avr. 2026

Autres produits Red Hat