Vulnérabilités de Red Hat Red Hat OpenShift AI 2.25

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-35030	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.4 Critique	6 avr. 2026
CVE-2026-35029	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	8.7 Élevée	6 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-27489	Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability	8.7 Élevée	1 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 Élevée	27 mars 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	27 mars 2026
CVE-2026-27893	vLLM is an inference and serving engine for large language models (LLMs)	8.8 Élevée	26 mars 2026
CVE-2025-12805	A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator	8.1 Élevée	26 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-33236	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…	8.1 Élevée	20 mars 2026
CVE-2026-33231	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…	7.5 Élevée	20 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-30922	pyasn1 is a generic ASN.1 library for Python	7.5 Élevée	18 mars 2026
CVE-2026-28500	Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability	8.6 Élevée	18 mars 2026
CVE-2026-32981	A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1	8.7 Élevée	17 mars 2026
CVE-2026-32640	SimpleEval is a library for adding evaluatable expressions into python projects	8.7 Élevée	13 mars 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 Élevée	12 mars 2026
CVE-2026-32274	Black is the uncompromising Python code formatter	8.7 Élevée	12 mars 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 Élevée	12 mars 2026
CVE-2026-31892	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	8.9 Élevée	11 mars 2026

Autres produits Red Hat