Vulnerabilities of Red Hat Exploit Intelligence

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-121837	Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort	4.3 Medium	Nov 6, 2026
CVE-2026-107912	Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw	7.7 High	Nov 5, 2026
CVE-2026-114236	storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…	3.3 Low	Oct 21, 2026
CVE-2026-87744	A flaw was found in Quarkus REST Data Panache	9.1 Critical	Oct 12, 2026
CVE-2026-94451	Quarkus REST Data Panache provides a way to automatically generate REST endpoints for data entities	6.5 Medium	Oct 12, 2026
CVE-2026-94449	Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyguard leads to denial of service	7.5 High	Sep 21, 2026
CVE-2026-93432	Io.quarkus.qute:quarkus-core: cross-site scripting (xss) and json injection via qute {#eval} section in quarkus	6.1 Medium	Sep 18, 2026
CVE-2026-87743	A flaw was found in Quarkus HTTP security	7.5 High	Sep 18, 2026
CVE-2026-87742	A flaw was found in quarkus-websockets-next	7.5 High	Sep 17, 2026
CVE-2026-81829	A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed…	5.3 Medium	Sep 17, 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critical	Jun 22, 2026
CVE-2026-49468	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.5 Critical	Jun 22, 2026
CVE-2026-54293	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research…	7.5 High	Jun 22, 2026
CVE-2026-12773	A weakness has been identified in BerriAI litellm up to 1.59.8	6.9 Medium	Jun 21, 2026
CVE-2026-48818	Starlette is a lightweight ASGI framework/toolkit	7.5 High	Jun 17, 2026
CVE-2026-41567	Moby is an open source container framework	7.2 High	Jun 5, 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Medium	Jun 2, 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Medium	Jun 1, 2026
CVE-2026-45292	opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing…	5.3 Medium	May 28, 2026
CVE-2026-48710	Exploited Kludex Starlette HTTP Request/Response Smuggling Vulnerability	6.5 Medium	May 26, 2026
CVE-2026-44209	Banks generates meaningful LLM prompts using a template language that makes sense	7.5 High	May 26, 2026
CVE-2026-47102	LiteLLM prior to 1.83.10 allows a user to modify their own user_role via the /user/update endpoint	8.7 High	May 21, 2026
CVE-2026-47101	LiteLLM prior to 1.83.14 allows an authenticated internal_user to create API keys with access to routes that their…	8.7 High	May 21, 2026
CVE-2026-42561	Python-Multipart is a streaming multipart parser for Python	7.5 High	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026

Other Red Hat products