Vulnérabilités connues pour Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-33805	@fastify/reply-from v12.6.1 and earlier and @fastify/http-proxy v11.4.3 and earlier process the client's Connection…	9.0 Critique	15 avr. 2026
CVE-2026-5588	Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	6.3 Moyenne	15 avr. 2026
CVE-2026-5598	Covert timing channel vulnerability in Legion of the Bouncy Castle Inc	8.9 Élevée	15 avr. 2026
CVE-2026-0636	Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability in Legion of the…	5.5 Moyenne	15 avr. 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critique	15 avr. 2026
CVE-2026-33806	Impact: Fastify applications using schema.body.content for per-content-type body validation can have validation bypassed…	7.5 Élevée	15 avr. 2026
CVE-2026-1462	A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow…	8.8 Élevée	13 avr. 2026
CVE-2026-40175	Axios is a promise based HTTP client for the browser and Node.js	4.8 Moyenne	10 avr. 2026
CVE-2026-5483	A flaw was found in odh-dashboard in Red Hat Openshift AI	8.5 Élevée	10 avr. 2026
CVE-2026-40217	LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the…	8.8 Élevée	10 avr. 2026
CVE-2026-39983	basic-ftp is an FTP client for Node.js	8.6 Élevée	9 avr. 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Moyenne	9 avr. 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Moyenne	8 avr. 2026
CVE-2026-23869	A denial of service vulnerability exists in React Server Components, affecting the following packages:…	7.5 Élevée	8 avr. 2026
CVE-2026-32280	During chain building, the amount of work that is done is not correctly limited when a large number of intermediate…	7.5 Élevée	8 avr. 2026
CVE-2026-32283	If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection…	7.5 Élevée	8 avr. 2026
CVE-2026-33810	When verifying a certificate chain containing excluded DNS constraints, these constraints are not correctly applied to…	7.5 Élevée	8 avr. 2026
CVE-2026-33815	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-33816	Memory-safety vulnerability in github.com/jackc/pgx/v5	9.8 Critique	7 avr. 2026
CVE-2026-5745	Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive	5.5 Moyenne	7 avr. 2026
CVE-2026-35030	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.4 Critique	6 avr. 2026
CVE-2026-35029	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	8.7 Élevée	6 avr. 2026
CVE-2026-34986	Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including…	7.5 Élevée	6 avr. 2026
CVE-2026-34756	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Moyenne	6 avr. 2026
CVE-2026-34755	vLLM is an inference and serving engine for large language models (LLMs)	6.5 Moyenne	6 avr. 2026

Autres produits Red Hat