Aller au contenu

Vulnérabilités connues pour Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-41607 Out-of-bounds Read vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41606 Uncontrolled Recursion vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41605 Integer Overflow or Wraparound vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41604 Out-of-bounds Read vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41603 Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Non notée 28 avr. 2026
CVE-2026-41602 Integer Overflow or Wraparound vulnerability in Apache Thrift TFramedTransport Go language implementation This issue… Non notée 28 avr. 2026
CVE-2025-48431 Mismatched Memory Management Routines vulnerability in Apache Thrift c_glib language bindings Non notée 28 avr. 2026
CVE-2026-41481 LangChain is a framework for building agents and LLM-powered applications 6.5 Moyenne 24 avr. 2026
CVE-2026-42039 Axios is a promise based HTTP client for the browser and Node.js 6.9 Moyenne 24 avr. 2026
CVE-2026-42041 Axios is a promise based HTTP client for the browser and Node.js 4.8 Moyenne 24 avr. 2026
CVE-2026-42043 Axios is a promise based HTTP client for the browser and Node.js 7.2 Élevée 24 avr. 2026
CVE-2026-42044 Axios is a promise based HTTP client for the browser and Node.js 6.5 Moyenne 24 avr. 2026
CVE-2026-42033 Axios is a promise based HTTP client for the browser and Node.js 7.4 Élevée 24 avr. 2026
CVE-2026-41140 Poetry is a dependency manager for Python 0.6 Faible 24 avr. 2026
CVE-2026-40897 Math.js is an extensive math library for JavaScript and Node.js 8.8 Élevée 24 avr. 2026
CVE-2026-40886 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes 7.7 Élevée 23 avr. 2026
CVE-2026-6844 Binutils: binutils: denial of service vulnerabilities in readelf via crafted elf files 5.5 Moyenne 22 avr. 2026
CVE-2026-6845 Binutils: binutils: denial of service via crafted elf file 5.0 Moyenne 22 avr. 2026
CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to cause the client to accept… Non notée 22 avr. 2026
CVE-2026-40938 Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines 7.5 Élevée 21 avr. 2026
CVE-2026-40895 follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows… 6.9 Moyenne 21 avr. 2026
CVE-2026-6587 A security flaw has been discovered in vibrantlabsai RAGAS up to 0.4.3 5.3 Moyenne 20 avr. 2026
CVE-2026-41242 protobufjs compiles protobuf definitions into JavaScript (JS) functions 9.4 Critique 18 avr. 2026
CVE-2026-40192 Pillow is a Python imaging library 8.7 Élevée 15 avr. 2026
CVE-2026-6385 A flaw was found in FFmpeg 6.5 Moyenne 15 avr. 2026

Autres produits Red Hat