Known vulnerabilities in Red Hat Enterprise Linux AI (RHEL AI) 3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-34734	HDF5 is software for managing data	7.8 High	Apr 9, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Medium	Apr 8, 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 High	Apr 8, 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 High	Apr 8, 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 High	Apr 8, 2026
CVE-2026-34756	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Medium	Apr 6, 2026
CVE-2026-34755	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Medium	Apr 6, 2026
CVE-2026-4800	The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same…	8.1 High	Mar 31, 2026
CVE-2026-33871	Netty is an asynchronous, event-driven network application framework	8.7 High	Mar 27, 2026
CVE-2026-33870	Netty is an asynchronous, event-driven network application framework	7.5 High	Mar 27, 2026
CVE-2026-33210	Ruby JSON is a JSON implementation for Ruby	8.3 High	Mar 20, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-3029	A path traversal and arbitrary file write vulnerability exist in the embedded get function in '_main_.py' in PyMuPDF…	7.5 High	Mar 19, 2026
CVE-2026-32981	A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1	8.7 High	Mar 17, 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 High	Mar 12, 2026
CVE-2026-31812	Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol	8.7 High	Mar 10, 2026
CVE-2026-25960	vLLM is an inference and serving engine for large language models (LLMs)	7.1 High	Mar 9, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2026-25048	xgrammar is an open-source library for efficient, flexible, and portable structured generation	8.7 High	Mar 5, 2026
CVE-2026-27606	Rollup is a module bundler for JavaScript	8.8 High	Feb 25, 2026
CVE-2026-26200	HDF5 is software for managing data	7.8 High	Feb 19, 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 High	Feb 11, 2026
CVE-2025-69872	DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default	9.8 Critical	Feb 11, 2026

Other Red Hat products