Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-107912	Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw	7.7 Élevée	5 nov. 2026
CVE-2026-117574	A flaw was found in ai-gateway-payload-processing	9.1 Critique	28 oct. 2026
CVE-2026-13451	A flaw was found in KServe	7.7 Élevée	28 oct. 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Moyenne	21 oct. 2026
CVE-2026-114236	storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…	3.3 Faible	21 oct. 2026
CVE-2026-17557	A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI	6.5 Moyenne	21 oct. 2026
CVE-2026-108334	Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides	7.4 Élevée	15 oct. 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 Élevée	23 sept. 2026
CVE-2026-87743	A flaw was found in Quarkus HTTP security	7.5 Élevée	18 sept. 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 Élevée	17 sept. 2026
CVE-2026-92091	Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array	5.9 Moyenne	16 sept. 2026
CVE-2026-86332	A flaw was found in odh-dashboard in Red Hat OpenShift AI	6.5 Moyenne	7 sept. 2026
CVE-2026-84185	Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification	5.9 Moyenne	3 sept. 2026
CVE-2026-18393	A flaw was found in FFmpeg	5.4 Moyenne	28 août 2026
CVE-2026-80179	Jwcrypto: jwcrypto: denial of service via malformed jwe tokens	5.9 Moyenne	27 août 2026
CVE-2026-15218	A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI	7.9 Élevée	17 août 2026
CVE-2026-18620	A flaw was found in Data Science Pipelines	7.1 Élevée	10 août 2026
CVE-2026-18618	A flaw was found in ml-metadata	7.5 Élevée	10 août 2026
CVE-2026-18611	A flaw was found in the Data Science Pipelines Operator	7.5 Élevée	10 août 2026
CVE-2026-18982	A flaw was found in the RHOAI training-operator	8.8 Élevée	10 août 2026
CVE-2026-18951	A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator	8.8 Élevée	10 août 2026
CVE-2026-18950	A flaw was found in odh-dashboard	8.8 Élevée	10 août 2026
CVE-2026-18949	A flaw was found in odh-dashboard	8.8 Élevée	10 août 2026
CVE-2026-18948	A flaw was found in Feast	9.9 Critique	10 août 2026
CVE-2026-18947	A flaw was found in Feast	8.5 Élevée	10 août 2026

Autres produits Red Hat