Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-83494	Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)	Non notée	6 nov. 2026
CVE-2026-83493	Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master	Non notée	6 nov. 2026
CVE-2026-107912	Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw	7.7 Élevée	5 nov. 2026
CVE-2026-120194	Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step	7.5 Élevée	31 oct. 2026
CVE-2026-114691	Gcc: integer wrap in `std	5.9 Moyenne	30 oct. 2026
CVE-2026-114690	Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std	6.2 Moyenne	30 oct. 2026
CVE-2026-117574	A flaw was found in ai-gateway-payload-processing	9.1 Critique	28 oct. 2026
CVE-2026-13451	A flaw was found in KServe	7.7 Élevée	28 oct. 2026
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Moyenne	21 oct. 2026
CVE-2026-114236	storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…	3.3 Faible	21 oct. 2026
CVE-2026-17557	A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI	6.5 Moyenne	21 oct. 2026
CVE-2026-92824	Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts	6.2 Moyenne	21 oct. 2026
CVE-2026-92822	Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml	6.2 Moyenne	21 oct. 2026
CVE-2026-92823	Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml	6.2 Moyenne	21 oct. 2026
CVE-2026-85977	Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding	5.3 Moyenne	16 oct. 2026
CVE-2026-85231	Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding	6.5 Moyenne	16 oct. 2026
CVE-2026-108334	Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides	7.4 Élevée	15 oct. 2026
CVE-2026-107161	Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients	7.5 Élevée	7 oct. 2026
CVE-2026-103242	Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag	7.1 Élevée	30 sept. 2026
CVE-2026-95520	Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages	7.1 Élevée	29 sept. 2026
CVE-2026-102010	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if	7.0 Élevée	28 sept. 2026
CVE-2026-95521	Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm	7.8 Élevée	24 sept. 2026
CVE-2026-95519	Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)	7.8 Élevée	24 sept. 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 Élevée	23 sept. 2026
CVE-2026-95619	Gcc: libstdc++ integer overflow in `new` operator	7.7 Élevée	22 sept. 2026

Autres produits Red Hat