Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Faible	13 mai 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Moyenne	13 mai 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 Élevée	13 mai 2026
CVE-2026-42266	JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…	8.8 Élevée	13 mai 2026
CVE-2026-42557	jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook…	8.6 Élevée	13 mai 2026
CVE-2026-44293	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.7 Élevée	13 mai 2026
CVE-2026-44289	protobufjs compiles protobuf definitions into JavaScript (JS) functions	7.5 Élevée	13 mai 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Moyenne	12 mai 2026
CVE-2026-31230	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its…	9.8 Critique	12 mai 2026
CVE-2026-31236	The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument	9.8 Critique	12 mai 2026
CVE-2026-31228	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow…	9.8 Critique	12 mai 2026
CVE-2026-2614	A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions…	7.5 Élevée	11 mai 2026
CVE-2026-42258	Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby	5.8 Moyenne	9 mai 2026
CVE-2026-42296	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	8.1 Élevée	9 mai 2026
CVE-2026-42294	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	8.2 Élevée	9 mai 2026
CVE-2026-42297	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	8.5 Élevée	9 mai 2026
CVE-2026-42208	Exploitée BerriAI LiteLLM SQL Injection Vulnerability	9.3 Critique	8 mai 2026
CVE-2026-42203	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	8.6 Élevée	8 mai 2026
CVE-2026-42271	Exploitée BerriAI LiteLLM Command Injection Vulnerability	8.7 Élevée	8 mai 2026
CVE-2026-42264	Axios is a promise based HTTP client for the browser and Node.js	7.4 Élevée	8 mai 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 Élevée	7 mai 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 Élevée	7 mai 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 Élevée	7 mai 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 Élevée	7 mai 2026

Autres produits Red Hat