RHSA-2026:24977

Axios is a promise based HTTP client for the browser and Node.js.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.

A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1.

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability.

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`.

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.

PyJWT is a JSON Web Token implementation in Python.

pyasn1 is a generic ASN.1 library for Python.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

python-dotenv reads key-value pairs from a .env file and can set them as environment variables.

Axios is a promise based HTTP client for the browser and Node.js.

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

gRPC-Go is the Go language implementation of gRPC.

The fix for CVE-2021-23337 added validation for the variable option in _.template but did not apply the same validation to options.imports key names, and both paths flow into the same Function() constructor sink.

Immutable.js provides many Persistent Immutable data structures.

xgrammar is an open-source library for efficient, flexible, and portable structured generation.

Pillow is a Python imaging library.

Tornado is a Python web framework and asynchronous networking library.

vLLM is an inference and serving engine for large language models (LLMs).

vLLM is an inference and serving engine for large language models (LLMs).

The net/url package does not set a limit on the number of query parameters in a query.

: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc.

PyTorch is a Python package that provides tensor computation.

Go JOSE provides an implementation of the Javascript Object Signing and Encryption set of standards in Go, including support for JSON Web Encryption (JWE), JSON Web Signature (JWS), and JSON Web Token (JWT) standards.

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.

SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.

fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize() and equal() functions.

vLLM is an inference and serving engine for large language models (LLMs).

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows redirects.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.