RHSA-2026:60520

MLflow is an open source AI engineering platform for agents, large language models, and machine learning models.

Starlette is a lightweight ASGI framework/toolkit.

Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the registry server.

In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled.

node-tar is a tar archive manipulation library for Node.js.

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree.

node-tar is a tar archive manipulation library for Node.js.

Pillow is a Python imaging library.

Mistune is a Python Markdown parser with renderers and plugins.

linkify-it is a links recognition library with full Unicode support.

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.

xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module.

In versions 3.0.0a1 through 3.2.0 of Mistune, there is a ReDoS (Regular Expression Denial of Service) vulnerability in `LINK_TITLE_RE` that allows an attacker who can supply Markdown for parsing to cause denial of servic…

shell-quote prior to 1.8.5 finalizes parsed tokens in parse() using Array.prototype.concat as a reduce accumulator, which reallocates and copies the entire growing array on every iteration.

form-data is a library for creating readable multipart/form-data streams.

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted ICNS image buffer.

image-size through 2.0.2 contains a denial of service vulnerability that allows remote attackers to permanently block the Node.js event loop by supplying a specially crafted image buffer with a zero-valued size field in…

Axios is a promise based HTTP client for the browser and Node.js.

GitPython is a python library used to interact with Git repositories.

A vulnerability in keras-team/keras version 3.14.0 allows for arbitrary code execution due to improper handling of deserialization in the `Lambda` layer.

A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization.

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

Pillow is a Python imaging library.

Axios is a promise based HTTP client for the browser and Node.js.

Diffusers is the a library for pretrained diffusion models.

Axios is a promise based HTTP client for the browser and Node.js.

GitPython is a python library used to interact with Git repositories.

The brace-expansion library generates arbitrary strings containing a common prefix and suffix.

js-yaml is a JavaScript YAML parser and dumper.

Pillow is a Python imaging library.

Pillow is a Python imaging library.

Pillow is a Python imaging library.

Pillow is a Python imaging library.

Pillow is a Python imaging library.

NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.

Pillow is a Python imaging library.

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.

Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4.

ws is an open source WebSocket client and server for Node.js.

JavaScript Cookie is a JavaScript API for handling cookies, client-side.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

basic-ftp is an FTP client for Node.js.

A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's file…

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the _get_os_path() function within jupyter_server/services/contents/fileio.py.

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

Pillow is a Python imaging library.

systeminformation is a System and OS information library for node.js.

tmp is a temporary file and directory creator for node.js.

Axios is a promise based HTTP client for the browser and Node.js.

Axios is a promise based HTTP client for the browser and Node.js.

GitPython is a python library used to interact with Git repositories.

PyJWT is a JSON Web Token implementation in Python.

Diffusers is the a library for pretrained diffusion models.

Jupyter Server is the backend for Jupyter web applications.

ws is an open source WebSocket client and server for Node.js.

DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG.

Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation.

ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript.

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag.

The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label.

A flaw was found in the `guardrails-detectors` component.

A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop.

FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and validates the DLTA region in pixel rather than byte units, so…

React Router is a router for React.

A flaw was found in Feast.

Pillow is a Python imaging library.

A flaw was found in the MaaS API.

LangChain is a framework for building agents and LLM-powered applications.

Jupyter Server is the backend for Jupyter web applications.

Diffusers is the a library for pretrained diffusion models.

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator.

Dulwich is a pure-Python implementation of the Git file formats and protocols.

A flaw was found in the RHOAI training-operator.

A flaw was found in the Data Science Pipelines Operator (DSPO).

A flaw was found in the Data Science Pipelines Operator (DSPO).

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway.

FFmpeg versions 4.4 through 8.1.2 contain an out-of-bounds memory access vulnerability in the ADX audio decoder within libavcodec/adxdec.c that allows attackers to trigger both out-of-bounds reads and writes by supplying…

pyasn1 is a generic ASN.1 library for Python.

pyasn1 is a generic ASN.1 library for Python.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322.

Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion and memory allocations.

When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0.

When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a crash.

If one side of the TLS connection sends multiple key update messages post-handshake in a single record, the connection can deadlock, causing uncontrolled consumption of resources.

During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.Intermediates, which can lead to a denial of service.

A flaw was found in the Data Science Pipelines Operator.

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI).

fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs.

brace-expansion through 5.0.6 is vulnerable to denial of service.

Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number of fragments.

Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the requested origin.

urllib3 is a user-friendly HTTP client library for Python.

pyasn1 is a generic ASN.1 library for Python.

Starlette is a lightweight ASGI framework/toolkit.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

An incorrectly placed cast from bytes to int allowed for server-side panic in the AES-GCM packet decoder for well-crafted inputs.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

React Router is a router for React.

In Jupyter Notebook versions 7.0.0 through 7.5.5, JupyterLab versions 4.5.6 and earlier, and the corresponding @jupyter-notebook/help-extension and @jupyterlab/help-extension packages before 7.5.6 and 4.5.7, a stored cro…

The RSA and DSA public key parsers did not enforce size limits on key parameters.

fast-uri normalize() decoded percent-encoded authority delimiters inside the host component and then re-emitted them as raw delimiters during serialization.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

A flaw was found in the trustyai-service-operator's LMEvalJob controller.

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI.

React Router is a router for React.

A flaw was found in the TrustyAI Service (TAS) deployment.

A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation.

jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor.

Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://).

An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation.

React Router is a router for React.

A flaw was found in Data Science Pipelines (DSP).

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation.

A flaw was found in Data Science Pipelines.

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

js-yaml is a JavaScript YAML parser and dumper.

protobufjs compiles protobuf definitions into JavaScript (JS) functions.

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem.

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions such as force-command after a sec…

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree.

opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API.

SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate.

pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation…