Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-42208	Exploitée BerriAI LiteLLM SQL Injection Vulnerability	9.3 Critique	8 mai 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critique	18 avr. 2026
CVE-2026-33805	@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection…	9.0 Critique	15 avr. 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critique	15 avr. 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-35030	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.4 Critique	6 avr. 2026
CVE-2026-0545	In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or…	9.1 Critique	3 avr. 2026
CVE-2026-32871	FastMCP is a Pythonic way to build MCP servers and clients	10.0 Critique	2 avr. 2026
CVE-2025-15379	A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the…	10.0 Critique	30 mars 2026
CVE-2025-15036	A path traversal vulnerability exists in the `extract_archive_to_dir` function within the…	9.6 Critique	30 mars 2026
CVE-2026-33937	Handlebars provides the power necessary to let users build semantic templates	9.8 Critique	27 mars 2026
CVE-2026-33211	Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines	9.6 Critique	23 mars 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critique	20 mars 2026
CVE-2026-27962	Authlib is a Python library which builds OAuth and OpenID Connect servers	9.1 Critique	16 mars 2026
CVE-2026-28229	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	9.8 Critique	11 mars 2026
CVE-2026-2635	MLflow Use of Default Password Authentication Bypass Vulnerability	9.8 Critique	20 févr. 2026
CVE-2025-14009	A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions	10.0 Critique	18 févr. 2026
CVE-2025-69872	DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default	9.8 Critique	11 févr. 2026
CVE-2026-1615	Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of…	9.8 Critique	9 févr. 2026
CVE-2026-22778	vLLM is an inference and serving engine for large language models (LLMs)	9.8 Critique	2 févr. 2026
CVE-2025-61140	The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution	9.8 Critique	28 janv. 2026
CVE-2025-61686	React Router is a router for React	9.1 Critique	10 janv. 2026

Autres produits Red Hat