Red Hat Security AdvisoryRHSA-2026:30089
Red Hat AI Inference Server 3.3.5 (CUDA)
Released 2026-06-25 · Red Hat rating Critical · View on Red Hat →
Fixes 21 records
Priority CRITICAL 86KEV
Starlette is a lightweight ASGI framework/toolkit.
CVSS 3.1MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.70288 · Published 2026-05-26 · Partial fix · 1.0.1 CWE-444
Priority HIGH 78
vLLM is an inference and serving engine for large language models (LLMs).
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.01152 · Published 2026-06-22 · Partial fix · 0.22.0 CWE-444
Priority HIGH 72
jq is a command-line JSON processor.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00366 · Published 2026-04-13 · Fixed in 0c7d133c3c7e37c00b6d46b658a02244fdd3c784 CWE-328
Priority HIGH 70
jq is a command-line JSON processor.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.0056 · Published 2026-04-13 · Partial fix · 2f09060afab23fe9390cce7cb860b10416e1bf5f CWE-125
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
CVSS 3.1HIGH 7.4· Network · No auth · No interaction · EPSS 0.00427 · Published 2026-05-28 · Partial fix · 2.13.0 CWE-287
Priority HIGH 67
vLLM is an inference and serving engine for large language models (LLMs).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.18287 · Published 2026-02-02 · Partial fix · 0.14.1 CWE-532
Priority MEDIUM 64
vLLM is an inference and serving engine for large language models (LLMs).
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00579 · Published 2026-01-27 · Partial fix · 0.14.1 CWE-918
Priority MEDIUM 45
vLLM is an inference and serving engine for large language models (LLMs).
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0098 · Published 2026-01-21 · Partial fix · 0.14.0 CWE-94
Priority MEDIUM 42
Use-after-free (UAF) was possible in the `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile` when a memory allocation fails with a `MemoryError` and the decompression instance is re-used.
CVSS 4.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00579 · Published 2026-04-13 · Partial fix · 3.10.21, 3.11.16 +4 CWE-416
Priority MEDIUM 40
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.9· Network · No auth · No interaction · EPSS 0.0068 · Published 2026-05-13 · Partial fix · 2.7.0 CWE-409
Priority MEDIUM 40
OpenEXR provides the specification and reference implementation of the EXR file format, an image storage format for the motion picture industry.
CVSS 4.0HIGH 8.6· Local · No auth · No interaction · EPSS 0.00501 · Published 2026-04-06 · Partial fix · 3.2.7, 3.3.9 +1 CWE-125
Priority LOW 39
Starlette is a lightweight ASGI framework/toolkit.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00368 · Published 2026-06-17 · Fixed in 1.1.0 CWE-918
Priority LOW 39
An issue was discovered in libsndfile 1.2.2 IMA ADPCM codec.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00504 · Published 2026-04-29 · Partial fix CWE-190
Priority LOW 38
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
CVSS 4.0MEDIUM 6.9· Network · No auth · No interaction · EPSS 0.00677 · Published 2026-04-08 · Partial fix · 46.0.7 CWE-119
Priority LOW 38
In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid, an outcome contrary to some users' expectations, if the download is performed as root with -O (legacy scp protocol) and without -p (pres…
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.00573 · Published 2026-04-02 · Partial fix · 10.3 CWE-281
Priority LOW 38
Vim is an open source, command line text editor.
CVSS 3.1HIGH 8.2· Local · No auth · User interaction · EPSS 0.00456 · Published 2026-04-06 · Partial fix · 9.2.0276 CWE-78
Priority LOW 37
A flaw was found in the libtiff library.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0057 · Published 2026-03-24 · Partial fix · 4.6.0-6.el10_1.3, 4.6.0-8.el10_2.1 +26 CWE-190
Priority LOW 36
urllib3 is an HTTP client library for Python.
CVSS 4.0HIGH 8.2· Network · No auth · No interaction · EPSS 0.00331 · Published 2026-05-13 · Partial fix · 2.7.0 CWE-200
Priority LOW 36
A flaw was found in Poppler's Splash backend.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00252 · Published 2026-06-01 · Fixed in 24.02.0-7.el10_2.2, 24.02.0-7.el10_0.1 +16 CWE-190
Priority LOW 33
Mitgation of CVE-2026-4519 was incomplete.
CVSS 4.0HIGH 7.0· Local · No auth · User interaction · EPSS 0.0029 · Published 2026-04-13 · Partial fix · 3.10.21, 3.11.16 +4 CWE-77
Priority LOW 32
A flaw was found in libcap.
CVSS 3.1HIGH 7.0· Local · Low privileges · No interaction · EPSS 0.00209 · Published 2026-04-09 · Partial fix · 2.69-7.el10_1.1, 2.69-7.el10_2.1 +51 CWE-367