Security
فارسی
All products

Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/pathservice-rhel9

Red Hat · Package
13 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
axios Requests Vulnerable To Possible SSRF and Credential Leakage via Absolute URLCVE-2025-27152 · GHSA-JR5F-V2JV-69X6 axiosCryostat 3/io.cryostat-cryostat3 npmRed Hat High Fix reported
vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` classCVE-2025-6242 · GHSA-3F6C-7FW2-PPM4Version ranges need review. vllmRed Hat AI Inference Server/rhaiis/vllm-spyre-rhel9 PyPIRed Hat High Fix reported
vllm API endpoints vulnerable to Denial of Service AttacksCVE-2025-48956 · GHSA-RXC4-3W6R-4V47Version ranges need review. vllmRed Hat AI Inference Server/rhaiis-preview/vllm-cuda-rhel9 PyPIRed Hat High Fix reported
Next.js has a Cache poisoning vulnerability due to omission of the Vary headerCVE-2025-49005 · GHSA-R2FC-CCR8-96C4 nextRed Hat Enterprise Linux 10/firefox npmRed Hat Low Fix reported
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
protobuf-python has a potential Denial of Service issueCVE-2025-4565 · GHSA-8QVM-5X2C-J2W7Version ranges need review. protobufOpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9 PyPIRed Hat High Fix reported
CIRCL-Fourq: Missing and wrong validation can lead to incorrect resultsCVE-2025-8556 · GHSA-2X5J-VHC8-9CWMVersion ranges need review. github.com/cloudflare/circlBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel9 GoRed Hat Low Fix reported
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
Information exposure in Next.js dev server due to lack of origin verificationCVE-2025-48068 · GHSA-3H52-269P-CP9R nextRed Hat Enterprise Linux 10/firefox npmRed Hat Low Fix reported
Next.js may leak x-middleware-subrequest-id to external hostsCVE-2025-30218 · GHSA-223J-4RM8-MRMF nextRed Hat Enterprise Linux 10/firefox npmRed Hat Low Fix reported
Next.js Race Condition to Cache PoisoningCVE-2025-32421 · GHSA-QPJV-V59X-3QC4 nextRed Hat Enterprise Linux 10/firefox npmRed Hat Low Fix reported
Next.JS vulnerability can lead to DoS via cache poisoning CVE-2025-49826 · GHSA-67RR-84XM-4C7R nextRed Hat Enterprise Linux 10/firefox npmRed Hat High Fix reported
Harden-Runner allows evasion of 'disable-sudo' policyCVE-2025-32955 · GHSA-MXR3-8WHJ-J74R step-security/harden-runnerRed Hat Enterprise Linux AI (RHEL AI)/rhelai1/pathservice-rhel9 GitHub ActionsRed Hat Medium Fix reported