Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift AI 3.3

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-34070 LangChain is a framework for building agents and LLM-powered applications 7.5 Élevée 31 mars 2026
CVE-2026-27893 vLLM is an inference and serving engine for large language models (LLMs) 8.8 Élevée 26 mars 2026
CVE-2026-33236 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research… 8.1 Élevée 20 mars 2026
CVE-2026-33231 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research… 7.5 Élevée 20 mars 2026
CVE-2026-33186 gRPC-Go is the Go language implementation of gRPC 9.1 Critique 20 mars 2026
CVE-2026-32829 lz4_flex is a pure Rust implementation of LZ4 compression/decompression 8.2 Élevée 20 mars 2026
CVE-2026-30922 pyasn1 is a generic ASN.1 library for Python 7.5 Élevée 18 mars 2026
CVE-2026-32981 A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1 8.7 Élevée 17 mars 2026
CVE-2026-32640 SimpleEval is a library for adding evaluatable expressions into python projects 8.7 Élevée 13 mars 2026
CVE-2026-32597 PyJWT is a JSON Web Token implementation in Python 7.5 Élevée 12 mars 2026
CVE-2026-28356 multipart is a fast multipart/form-data parser for python 7.5 Élevée 12 mars 2026
CVE-2026-31812 Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol 8.7 Élevée 10 mars 2026
CVE-2026-0846 A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file… 8.6 Élevée 9 mars 2026
CVE-2026-29063 Immutable.js provides many Persistent Immutable data structures 8.7 Élevée 6 mars 2026
CVE-2026-29074 SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files 7.5 Élevée 6 mars 2026
CVE-2026-0847 A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple… 8.6 Élevée 4 mars 2026
CVE-2026-25990 Pillow is a Python imaging library 8.6 Élevée 11 févr. 2026
CVE-2025-69872 DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default 9.8 Critique 11 févr. 2026
CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the… 2.9 Faible 11 févr. 2026
CVE-2026-25639 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 9 févr. 2026
CVE-2026-22778 vLLM is an inference and serving engine for large language models (LLMs) 9.8 Critique 2 févr. 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 Élevée 28 janv. 2026
CVE-2026-24779 vLLM is an inference and serving engine for large language models (LLMs) 7.1 Élevée 27 janv. 2026
CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python 8.6 Élevée 27 janv. 2026
CVE-2026-1260 Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created… 8.5 Élevée 22 janv. 2026

Autres produits Red Hat