Skip to contentRed Hat Ai Inference Server vulnerabilities
- vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 morevLLM - Denial of Service via Unvalidated Multimodal EmbeddingsCVE-2026-56340Fix available8.7 High
- python urllib3, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift 1.18 +105 more +107 moreurllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API)CVE-2026-21441Fix available8.9 High
- aio-libs aiohttp, red hat openshift lightspeed, openshift service mesh 2 +18 more +20 moreAIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bombCVE-2025-69223Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruptionCVE-2025-14087Fix available5.6 Medium
- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsCVE-2025-13327Fix available6.3 Medium
- red hat ai inference server, enterprise linux ai (rhel ai) +1 moreVllm: server side request forgery (ssrf) in mediaconnectorCVE-2025-6242Fix available7.1 High
- red hat ai inference server 3.2, discovery 2, enterprise linux 10 +16 more +18 moreLibtiff: libtiff write-what-whereCVE-2025-9900Fix available8.8 High
- red hat ai inference serverAi-inference-server: authentication bypass via unprotected inference endpoint in apiCVE-2025-69205.3 Medium
- libssh, red hat ai inference server 3.2, enterprise linux 10 +25 more +27 moreLibssh: out-of-bounds read in sftp_handle()CVE-2025-5318Fix available5.4 Medium
- xmlsoft libxml2, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +34 more +36 moreLibxml2: stack buffer overflow in xmllint interactive shell command handlingCVE-2025-6170Fix available2.5 Low
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.cCVE-2023-39329Fix available6.5 Medium
- uclouvain openjpeg, red hat ai inference server 3.2, enterprise linux 6 +3 more +5 moreOpenjpeg: malicious files can cause the program to enter a large loopCVE-2023-39327Fix available4.3 Medium
- libtiff, apple ipados, iphone os +21 more +23 moreLibtiff: segment fault in libtiff in tiffreadrgbatileext() leading to denial of serviceCVE-2023-52356Public exploitFix available7.5 High
- libtiff, red hat ai inference server 3.2, discovery 2 +11 more +13 moreLibtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomCVE-2023-52355Fix available7.5 High