Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/bootc-ibm-nvidia-rhel9
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
h11 accepts some malformed Chunked-Encoding bodies
CVE-2025-43859 · GHSA-VQFR-H8MV-GHFJ
Version ranges need review.
h11
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
PyPI
Red Hat
Critical
Fix reported
2026-10-27
Jinja has a sandbox breakout through malicious filenames
CVE-2024-56201 · GHSA-GMJ6-6F8F-6699
Version ranges need review.
jinja2
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
Jinja has a sandbox breakout through indirect reference to format method
CVE-2024-56326 · GHSA-Q2X7-8RV6-6Q7H
Version ranges need review.
jinja2
OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-09-10
Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
CVE-2025-27516 · GHSA-CPWX-VRP4-4PQ7
Version ranges need review.
jinja2
OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel8
PyPI
Red Hat
Medium
Fix reported
2026-09-10
vLLM Deserialization of Untrusted Data vulnerability
CVE-2024-11041 · GHSA-5VQR-WPRC-CPP7
Version ranges need review.
vllm
Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/bootc-amd-rhel9
PyPI
Red Hat
Critical
No fix reported
2026-08-07
vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache
CVE-2025-25183 · GHSA-RM76-4MRF-V9R8
Version ranges need review.
vllm
Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/bootc-aws-nvidia-rhel9
PyPI
Red Hat
Low
Fix reported
2026-08-07
vLLM denial of service via outlines unbounded cache on disk
CVE-2025-29770 · GHSA-MGRM-FGJV-MHV8
Version ranges need review.
vllm
Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/bootc-amd-rhel9
PyPI
Red Hat
Medium
Fix reported
2026-08-07
vllm: Malicious model to RCE by torch.load in hf_model_weights_iterator
CVE-2025-24357 · GHSA-RH4J-5RHW-HR54
Version ranges need review.
vllm
Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/bootc-aws-nvidia-rhel9
PyPI
Red Hat
High
Fix reported
2026-08-07
