Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/modelcar-granite-3-1-8b-starter-v1

Red Hat · Package

7 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` classCVE-2025-6242 · GHSA-3F6C-7FW2-PPM4Version ranges need review.	vllm Red Hat AI Inference Server/rhaiis/vllm-spyre-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
vllm API endpoints vulnerable to Denial of Service AttacksCVE-2025-48956 · GHSA-RXC4-3W6R-4V47Version ranges need review.	vllm Red Hat AI Inference Server/rhaiis-preview/vllm-cuda-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
Next.js has a Cache poisoning vulnerability due to omission of the Vary headerCVE-2025-49005 · GHSA-R2FC-CCR8-96C4	next Red Hat Enterprise Linux 10/firefox	npmRed Hat	Low	Fix reported	2026-09-10
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
protobuf-python has a potential Denial of Service issueCVE-2025-4565 · GHSA-8QVM-5X2C-J2W7Version ranges need review.	protobuf OpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9	PyPIRed Hat	High	Fix reported	2026-09-10
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review.	urllib3 Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
Next.JS vulnerability can lead to DoS via cache poisoning CVE-2025-49826 · GHSA-67RR-84XM-4C7R	next Red Hat Enterprise Linux 10/firefox	npmRed Hat	High	Fix reported	2025-07-04