Red Hat AI Inference Server/rhai/base-image-rocm-rhel9

Red Hat · Package

6 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
urllib3 streaming API improperly handles highly compressed dataCVE-2025-66471 · GHSA-2XPW-W6GG-JR37Version ranges need review.	urllib3 Builds for Red Hat OpenShift/openshift-builds/openshift-builds-shared-resource-webhook-rhel9	PyPIRed Hat	High	Fix reported	2026-09-25
urllib3 allows an unbounded number of links in the decompression chainCVE-2025-66418 · GHSA-GM62-XV2J-4W53Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
pip Path Traversal vulnerabilityCVE-2026-1703 · GHSA-6VGW-5PG2-W6JPVersion ranges need review.	pip Lightspeed Core/lightspeed-core/dataverse-exporter-rhel9	PyPIRed Hat	Low	Fix reported	2026-09-10
Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpackCVE-2026-24049 · GHSA-8RRH-RW8J-W5FXVersion ranges need review.	wheel Logging Subsystem for Red Hat OpenShift/openshift-logging/elasticsearch-operator-bundle	PyPIRed Hat	High	Fix reported	2026-09-10
Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)CVE-2026-21441 · GHSA-38JV-5279-WG99Version ranges need review.	urllib3 External Secrets Operator for Red Hat OpenShift/external-secrets-operator/bitwarden-sdk-server-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
runc container escape and denial of service due to arbitrary write gadgets and procfs write redirectsCVE-2025-52881 · GHSA-CGRX-MC8F-2PRMVersion ranges need review.	github.com/opencontainers/runc github.com/opencontainers/selinux	GoRed Hat	High	Fix reported	2026-09-10