Red Hat Security Advisory

RHSA-2026:5809

Red Hat AI Inference Server 3.2.2 (cuda-ubi9)

Released 2026-03-25 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2026-25429 CVE-2026-32981 · GHSA-j3mh-qmjj-xp83

HIGH 77

A path traversal vulnerability was identified in Ray Dashboard (default port 8265) in Ray versions prior to 2.8.1.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00966 Published 2026-03-17 Partial fix · 2.8.1 CWE-22

TI-2025-41712 CVE-2025-68131 · GHSA-wcj4-jw5j-44wh

MEDIUM 64

cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.

CVSS 4.0MEDIUM 5.5 Network No auth No interaction EPSS 0.00459 Published 2025-12-31 Partial fix · 5.8.0 CWE-212

TI-2026-20232 CVE-2026-25048 · GHSA-7rgv-gqhr-fxg3

MEDIUM 46

xgrammar is an open-source library for efficient, flexible, and portable structured generation.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01321 Published 2026-03-05 Partial fix · 0.1.32 CWE-674

TI-2026-22636 CVE-2026-28356 · GHSA-p2m9-wcp5-6qw3

MEDIUM 40

multipart is a fast multipart/form-data parser for python.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00841 Published 2026-03-12 Partial fix · 1.3.1, 1.2.2 CWE-1333

TI-2025-42682 CVE-2025-69228 · GHSA-6jhg-hg63-jvvf

LOW 35

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00407 Published 2026-01-05 Partial fix · 3.13.3 CWE-770

TI-2025-42681 CVE-2025-69227 · GHSA-jj3x-wxrx-4x23

LOW 35

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 4.0MEDIUM 6.6 Network No auth No interaction EPSS 0.00396 Published 2026-01-05 Partial fix · 3.13.3 CWE-835