Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-5241	A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an…	8.0 Élevée	3 juin 2026
CVE-2026-4035	A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI…	9.1 Critique	3 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Moyenne	2 juin 2026
CVE-2024-52011	launch-editor allows users to open files with line numbers in editor from Node.js	7.5 Élevée	1 juin 2026
CVE-2026-49121	AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in…	9.2 Critique	1 juin 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Moyenne	1 juin 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Moyenne	28 mai 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 Élevée	28 mai 2026
CVE-2026-44724	systeminformation is a System and OS information library for node.js	7.8 Élevée	27 mai 2026
CVE-2026-48710	Exploitée Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Moyenne	26 mai 2026
CVE-2026-2651	A vulnerability in MLflow…	9.0 Critique	25 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-9277	shell-quote's `quote()` function did not validate object-token inputs against the operator model used by `parse()`	8.1 Élevée	22 mai 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critique	22 mai 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critique	22 mai 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 Élevée	22 mai 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critique	22 mai 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Moyenne	22 mai 2026
CVE-2026-39828	When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were…	6.3 Moyenne	22 mai 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critique	22 mai 2026
CVE-2026-47102	LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint	8.7 Élevée	21 mai 2026
CVE-2026-47101	LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their…	8.7 Élevée	21 mai 2026
CVE-2026-2611	In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints	9.6 Critique	19 mai 2026
CVE-2025-51427	An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in…	7.3 Élevée	19 mai 2026

Autres produits Red Hat