Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	10 avr. 2026
CVE-2026-5483	A flaw was found in odh-dashboard in Red Hat Openshift AI	8.5 Élevée	10 avr. 2026
CVE-2026-40217	LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…	8.8 Élevée	10 avr. 2026
CVE-2026-39983	basic-ftp is an FTP client for Node.js	8.6 Élevée	9 avr. 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Moyenne	9 avr. 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Moyenne	8 avr. 2026
CVE-2026-23869	A denial of service vulnerability exists in React Server Components, affecting the following packages:…	7.5 Élevée	8 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-5745	Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	5.5 Moyenne	7 avr. 2026
CVE-2026-35030	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.4 Critique	6 avr. 2026
CVE-2026-35029	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	8.7 Élevée	6 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-34756	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Moyenne	6 avr. 2026
CVE-2026-34755	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Moyenne	6 avr. 2026
CVE-2026-34444	Lupa integrates the runtimes of Lua or LuaJIT2 into CPython	7.9 Élevée	6 avr. 2026
CVE-2026-0545	In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or…	9.1 Critique	3 avr. 2026
CVE-2026-34742	The Go MCP SDK used Go's standard encoding/json	7.6 Élevée	2 avr. 2026
CVE-2026-34601	xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module	7.5 Élevée	2 avr. 2026
CVE-2026-32871	FastMCP is a Pythonic way to build MCP servers and clients	10.0 Critique	2 avr. 2026
CVE-2026-27489	Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability	8.7 Élevée	1 avr. 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 Élevée	31 mars 2026

Autres produits Red Hat