Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-34070	LangChain is a framework for building agents and LLM-powered applications	7.5 Élevée	31 mars 2026
CVE-2025-15379	A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the…	10.0 Critique	30 mars 2026
CVE-2025-15036	A path traversal vulnerability exists in the `extract_archive_to_dir` function within the…	9.6 Critique	30 mars 2026
CVE-2026-33941	Handlebars provides the power necessary to let users build semantic templates	8.3 Élevée	27 mars 2026
CVE-2026-33940	Handlebars provides the power necessary to let users build semantic templates	8.1 Élevée	27 mars 2026
CVE-2026-33939	Handlebars provides the power necessary to let users build semantic templates	7.5 Élevée	27 mars 2026
CVE-2026-33938	Handlebars provides the power necessary to let users build semantic templates	8.1 Élevée	27 mars 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critique	27 mars 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 Élevée	27 mars 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	27 mars 2026
CVE-2025-15381	Unauthorized Access to Tracing and Assessment Endpoints in mlflow/mlflow	8.1 Élevée	27 mars 2026
CVE-2026-27893	vLLM is an inference and serving engine for large language models (LLMs)	8.8 Élevée	26 mars 2026
CVE-2025-12805	A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator	8.1 Élevée	26 mars 2026
CVE-2026-32286	The DataRow.Decode function fails to properly validate field lengths	7.5 Élevée	26 mars 2026
CVE-2026-4926	Impact: A bad regular expression is generated any time you have multiple sequential optional groups (curly brace…	7.5 Élevée	26 mars 2026
CVE-2025-67030	Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before…	8.8 Élevée	25 mars 2026
CVE-2026-33211	Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines	9.6 Critique	23 mars 2026
CVE-2026-33228	flatted is a circular JSON parser	8.9 Élevée	20 mars 2026
CVE-2026-33236	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…	8.1 Élevée	20 mars 2026
CVE-2026-33231	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…	7.5 Élevée	20 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-23536	A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated…	7.5 Élevée	20 mars 2026
CVE-2026-32829	lz4_flex is a pure Rust implementation of LZ4 compression/decompression	8.2 Élevée	20 mars 2026
CVE-2026-4426	Libarchive: libarchive: denial of service via malformed iso file processing	6.5 Moyenne	19 mars 2026
CVE-2025-15031	A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar…	8.1 Élevée	18 mars 2026

Autres produits Red Hat