| Pillow: Memory disclosure and segfault in libtiff encoder via crafted TIFF tagsCVE-2026-112902 · GHSA-XVH5-G6GV-559V |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| aiohttp: Multiple instances of excessive or unbounded memory/CPU useCVE-2026-123817 · GHSA-2G87-PP6C-29X5 |
aiohttpExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCECVE-2026-115915 · GHSA-H3RC-J82P-2C3HVersion ranges need review. |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsCVE-2026-115918 · GHSA-X567-49G5-P4CFVersion ranges need review. |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)CVE-2026-115916 · GHSA-Q97C-P368-75C4Version ranges need review. |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolCVE-2026-115911 · GHSA-542M-9234-8GVFVersion ranges need review. |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| PYSEC-2026-4350CVE-2026-116173 · GHSA-6PGW-F3PV-4H8Q |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| PYSEC-2026-4351CVE-2026-116176 · GHSA-VFP2-C8PQ-V6H6 |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| PYSEC-2026-4353CVE-2026-116178 · GHSA-34QW-Q2H2-JP3M |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| PYSEC-2026-4352CVE-2026-116177 · GHSA-MM38-5G96-7J6X |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledCVE-2026-115912 · GHSA-6757-HGGM-HP2WVersion ranges need review. |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
High
|
Fix reported |
|
| vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP serverCVE-2026-115917 · GHSA-VVPG-RRWW-WPMHVersion ranges need review. |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
Low
|
Fix reported |
|
| Pillow multi-frame loaders can reuse stale native image storage after mode transitionsCVE-2026-96639 · GHSA-V9PV-5GC8-W2M6Version ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| vLLM DeepSeek-OCR image processing vulnerable to denial of serviceCVE-2026-115914 · GHSA-GQ5Q-89C7-VHVX |
vllmRed Hat AI Inference Server/rhaii-fast/vllm-cpu-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live holdCVE-2026-112908 · GHSA-6627-M3XW-93MP |
filelockExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Pillow: Heap buffer overflow in ImagingJpegDecodeCVE-2026-112403 · GHSA-8G5G-8VMR-9782Version ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionCVE-2026-112398 · GHSA-5X8W-8JJ5-Q52HVersion ranges need review. |
pillowExploit Intelligence/exploit-intelligence/vulnerability-analysis-rhel9 |
PyPIRed Hat |
Critical
|
Fix reported |
|
| Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesCVE-2026-116685 · GHSA-5H93-6WHR-6Q8J |
mcpAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource serverCVE-2026-116684 · GHSA-W4FH-QVV9-3V23 |
mcpAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
| Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasCVE-2026-116686 · GHSA-RWRF-2PQF-9J8J |
mcpAnsible Automation Orchestrator 2026/ansible-automation-platform/automation-orchestrator-backend-rhel9 |
PyPIRed Hat |
Medium
|
Fix reported |
|
