Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-30922	pyasn1 is a generic ASN.1 library for Python	7.5 Élevée	18 mars 2026
CVE-2026-28500	Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability	8.6 Élevée	18 mars 2026
CVE-2026-27459	pyOpenSSL is a Python wrapper around the OpenSSL library	7.2 Élevée	17 mars 2026
CVE-2026-32981	A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1	8.7 Élevée	17 mars 2026
CVE-2025-69196	FastMCP is the standard framework for building MCP applications	7.4 Élevée	16 mars 2026
CVE-2026-28498	Authlib is a Python library which builds OAuth and OpenID Connect servers	8.2 Élevée	16 mars 2026
CVE-2026-27962	Authlib is a Python library which builds OAuth and OpenID Connect servers	9.1 Critique	16 mars 2026
CVE-2025-14287	A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the…	7.5 Élevée	15 mars 2026
CVE-2026-32640	SimpleEval is a library for adding evaluatable expressions into python projects	8.7 Élevée	13 mars 2026
CVE-2026-4105	Systemd: systemd: privilege escalation via improper access control in registermachine d-bus method	6.7 Moyenne	13 mars 2026
CVE-2026-32597	PyJWT is a JSON Web Token implementation in Python	7.5 Élevée	12 mars 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 Élevée	12 mars 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 Élevée	12 mars 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 Élevée	12 mars 2026
CVE-2026-32274	Black is the uncompromising Python code formatter	8.7 Élevée	12 mars 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 Élevée	12 mars 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 Élevée	12 mars 2026
CVE-2026-31892	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	8.9 Élevée	11 mars 2026
CVE-2026-28229	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	9.8 Critique	11 mars 2026
CVE-2026-31837	Istio is an open platform to connect, manage, and secure microservices	8.7 Élevée	10 mars 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 Élevée	10 mars 2026
CVE-2026-25960	vLLM is an inference and serving engine for large language models (LLMs)	7.1 Élevée	9 mars 2026
CVE-2026-0846	A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file…	8.6 Élevée	9 mars 2026
CVE-2026-29786	node-tar is a full-featured Tar for Node.js	8.2 Élevée	7 mars 2026
CVE-2026-24308	Improper handling of configuration values in ZKConfig in Apache ZooKeeper 3.8.5 and 3.9.4 on all platforms allows an…	Non notée	7 mars 2026

Autres produits Red Hat