Red Hat Security Advisory: RHOAI 3.5.3 - Red Hat OpenShift AI

CVE-2019-25781 — markdown: python-markdown: Denial of Service via inefficient inline link parsing CVE-2023-54404 — zod: zod: Denial of service via unbounded array validation CVE-2026-13697 — undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives CVE-2026-18427 — @fastify/static: @fastify/static: Information disclosure via route guard bypass CVE-2026-18446 — fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority CVE-2026-19534 — undici: undici: Denial of Service via unrequested WebSocket subprotocol CVE-2026-19693 — extract-zip: extract-zip: Arbitrary file write via symlink in archive CVE-2026-33818 — encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal CVE-2026-47219 — find-my-way: find-my-way: Denial of Service vulnerability in HTTP/2 server CVE-2026-50289 — systeminformation: systeminformation: Arbitrary Command Execution via OS Command Injection CVE-2026-53995 — mlflow: mlflow: Arbitrary file write via FileStore path traversal CVE-2026-59951 — mcp: mcp: Denial of Service via session memory exhaustion in streamable HTTP servers CVE-2026-62384 — nltk: NLTK: Information Disclosure via Symlink Sandbox Bypass CVE-2026-63209 — github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing CVE-2026-68498 — com.fasterxml.jackson.core/jackson-core: tools.jackson.core/jackson-core: jackson-core: Denial of Service via excessively long JSON property names CVE-2026-69112 — accelerate: Hugging Face Accelerate: Path Traversal and Denial of Service via weight_map CVE-2026-69152 — brace-expansion: DoS via unbounded intermediate arrays, bypassing the CVE-2026-14257 mitigation CVE-2026-69243 — aiohttp: AIOHTTP: HTTP Request Smuggling via WebSocket Upgrade CVE-2026-69244 — aiohttp: AIOHTTP: Denial of Service via malformed HTTP responses CVE-2026-73415 — jupyterlab: JupyterLab: Arbitrary code execution via malicious image in image viewer CVE-2026-73417 — jupyterlab: JupyterLab: Cross-site scripting (XSS) allows arbitrary code execution CVE-2026-73502 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via unauthenticated nil-pointer dereference CVE-2026-73627 — jupyterlab: JupyterLab: Plugin manager lock-rule bypass allows unauthorized plugin control CVE-2026-73646 — postcss: PostCSS: Information disclosure via path traversal in source map auto-loading CVE-2026-75507 — graphql-core: graphql-core: Denial of Service via nested inline fragments during query validation CVE-2026-75508 — graphql-core: graphql-core: Denial of Service via token limit bypass using comments CVE-2026-75838 — dompurify: DOMPurify: Cross-Site Scripting via IN_PLACE sanitization CVE-2026-75899 — fast-uri: fast-uri: Server-Side Request Forgery via repeated hostname percent-decoding CVE-2026-75931 — fast-uri: fast-uri: Host confusion via skipped IDN canonicalization CVE-2026-75975 — fast-uri: fast-uri: Server-side request forgery via malformed IPv6 normalization CVE-2026-76172 — fast-uri: fast-uri: URI parsing flaw enables server-side request forgery and redirects CVE-2026-76222 — gitpython: GitPython: Arbitrary file creation via path traversal in .gitmodules submodule names CVE-2026-76905 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via malformed multipart/form-data body CVE-2026-77301 — adm-zip: adm-zip: Denial of Service via uncontrolled memory allocation CVE-2026-77354 — github.com/getkin/kin-openapi: kin-openapi: Denial of Service via uncontrolled resource consumption in deepObject query parameter decoding CVE-2026-78676 — gitpython: GitPython before 3.1.59 Remote Code Execution via Config Injection CVE-2026-78677 — GitPython: GitPython: Arbitrary Code Execution via Path Traversal CVE-2026-78679 — GitPython: GitPython: Arbitrary file read via TagReference.create() CVE-2026-78682 — nltk: NLTK: Server-Side Request Forgery via HTTP Proxy Configuration CVE-2026-79674 — nltk: NLTK: Information disclosure via path traversal in corpus-reader constructors CVE-2026-79675 — nltk: NLTK before 3.10.3 JVM Argument Injection via Per-Call Options CVE-2026-79721 — mlflow: MLflow: Arbitrary code execution via maliciously crafted model artifact CVE-2026-81722 — nltk: nltk PorterStemmer: Denial of Service due to inefficient token processing CVE-2026-81724 — nltk: NLTK: Denial of Service via Uncontrolled Recursion CVE-2026-81726 — nltk: NLTK: Unauthorized file access via path traversal in model-artifact APIs CVE-2026-81727 — nltk: NLTK: Filesystem containment bypass allows local file overwrite CVE-2026-82417 — qs: qs: Denial of Service via improper validation in stringify function CVE-2026-84292 — fast-uri: fast-uri: Authority Injection via Unvalidated Port Serialization CVE-2026-84375 — js-yaml: js-yaml: Denial of Service vulnerability in YAML parsing CVE-2026-84394 — fast-uri: fast-uri: Host confusion via unbalanced URI brackets can bypass security policies CVE-2026-84445 — google.golang.org/grpc: gRPC-Go: Denial of Service via malformed RPC requests CVE-2026-84961 — undici: undici: TLS certificate validation bypass in BalancedPool via dropped connect options CVE-2026-85124 — @fastify/http-proxy: @fastify/http-proxy: Information disclosure via path traversal with backslash dot-segments CVE-2026-85152 — undici: undici: Authentication bypass via cross-origin cache poisoning due to missing origin isolation CVE-2026-85666 — ogx: OGX: Information disclosure via Server-Side Request Forgery in MCP tool server_url CVE-2026-86049 — jupyter-server: Jupyter Server: Information disclosure via 5xx request logging CVE-2026-87018 — undici: undici: Denial of Service via TLS renegotiation with mismatched certificate CVE-2026-87776 — compression: compression: Denial of Service via memory leak on premature response close CVE-2026-87817 — GitPython: GitPython: Remote Code Execution via Git directory impersonation CVE-2026-88029 — pymongo: MongoDB Python Driver: Data disclosure and denial of service via query-operator injection CVE-2026-89032 — litellm: LiteLLM: Information disclosure via semantic cache metadata mismatch CVE-2026-89418 — google-protobuf: google-protobuf: Denial of Service via uncontrolled recursion in protobuf group field parsing CVE-2026-90711 — proxy-addr: proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet CVE-2026-91403 — OpenJDK: Distrust eMudhra intermediate CA certificates due to security concerns CVE-2026-91777 — com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion CVE-2026-92000 — adm-zip: adm-zip: Denial of Service via crafted ZIP archives with zero declared uncompressed size CVE-2026-92786 — LightGBM: LightGBM: Out-of-bounds write via crafted model file CVE-2026-93348 — unsloth-zoo: unsloth: Unsloth Zoo: Arbitrary code execution via crafted model configuration CVE-2026-93690 — uri-js: uri-js: Denial of Service via malformed path segments CVE-2026-93749 — source-map-js: source-map-js: Denial of Service via malformed indexed source maps CVE-2026-93753 — deepmerge: deepmerge: Prototype Poisoning via mergeObject function CVE-2026-96639 — pillow: Pillow multi-frame loaders can reuse stale native image storage after mode transitions CVE-2026-96640 — pillow: pillow: Denial of Service via duplicate page references in PDF files CVE-2026-96643 — pillow: pillow: Denial of Service via repeated EXIF headers CVE-2026-96644 — pillow: Pillow: Denial of Service via out-of-bounds read in metafile parser CVE-2026-96749 — pymongo: pymongo: Out-of-bounds write via integer overflow during BSON encoding CVE-2026-96778 — pillow: pillow: Arbitrary code execution via JPEG encoder buffer overflow CVE-2026-97687 — urllib3: urllib3: Traffic interception via HTTPS proxy TLS configuration override CVE-2026-97689 — urllib3: urllib3: Denial of Service via unbounded memory allocation in chunk parser CVE-2026-102267 — pyjwt: pyjwt: Verification key substitution via unvalidated JWKS redirects CVE-2026-102271 — pyjwt: PyJWT: Authentication bypass via acceptance of DER public keys as HMAC secrets CVE-2026-102272 — pyjwt: pyjwt: Token forgery via improper Unicode byte-order mark handling CVE-2026-102276 — brace-expansion: brace-expansion: Denial of Service via stack exhaustion from crafted brace patterns CVE-2026-102278 — brace-expansion: brace-expansion: Denial of Service via uncontrolled recursion in nested brace patterns CVE-2026-102282 — adm-zip: adm-zip: Privilege escalation via unfiltered permission bits in extracted archives CVE-2026-102422 — shell-quote: shell-quote: Arbitrary command execution via improper line terminator handling CVE-2026-102460 — io.vertx/vertx-web: vertx-web: Authorization bypass via ChainAuthHandler scope validation failure CVE-2026-102554 — com.google.guava/guava: Google Guava: Denial of Service via unthrottled memory allocation during deserialization CVE-2026-102831 — jupyterlab: JupyterLab: Cross-Site Scripting via malicious clipboard cell pasting CVE-2026-102994 — pypdf: pypdf: Denial of Service via crafted indirect object tokens in PDF files CVE-2026-102996 — pypdf: pypdf: Denial of Service via excessive memory consumption during font parsing CVE-2026-102997 — pypdf: pypdf: Denial of Service via crafted FlateDecode stream CVE-2026-102998 — pypdf: pypdf: Denial of Service via crafted PDF form fields CVE-2026-102999 — pypdf: pypdf: Denial of Service via crafted PDF with numerous embedded files CVE-2026-103000 — pypdf: pypdf: Denial of Service via large alphabetical page labels CVE-2026-103262 — tornado: Tornado: Denial of Service via decompression bomb in CurlAsyncHTTPClient CVE-2026-104150 — http-server: http-server: Denial of Service via inefficient regular expression in slug route matcher CVE-2026-104851 — fsspec: fsspec: arbitrary code execution via unrestricted template rendering in ReferenceFileSystem CVE-2026-106445 — handlebars: Handlebars: JavaScript Injection via Own Property Check Bypass CVE-2026-106446 — handlebars: Handlebars: JavaScript Injection via AST Type Confusion in compile (Program.blockParams) CVE-2026-108859 — github.com/mark3labs/mcp-go: mcp-go: Denial of Service via unbounded HTTP request body buffering CVE-2026-109156 — mlserver: MLServer: Arbitrary file write via path traversal in environment archive extraction CVE-2026-109383 — undici: undici: Certificate validation bypass via dropped TLS options in Agent CVE-2026-109527 — mcp: mcp: Denial of Service via unbounded HTTP request body buffering CVE-2026-109829 — undici: undici: Cache poisoning and information disclosure via improper cross-origin redirect caching CVE-2026-109855 — undici: undici: Denial of Service via failed HTTP/2 WebSocket handshake CVE-2026-109869 — undici: undici: Denial of Service via unhandled stream error on excessive content encodings CVE-2026-109956 — nltk: nltk: Arbitrary file write via path traversal in WekaClassifier CVE-2026-110856 — GitPython: GitPython: Denial of Service via regular expression backtracking in date parsing CVE-2026-110857 — GitPython: GitPython: Arbitrary code execution via unsafe URL protocol handling CVE-2026-110858 — GitPython: GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspec CVE-2026-110859 — GitPython: GitPython: Arbitrary file read via argument injection in branch checkout CVE-2026-111064 — aiohttp: aiohttp: Denial of Service via missing initial request timeout CVE-2026-111066 — aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing CVE-2026-111758 — markdown-it: markdown-it: Denial of Service via unclosed link reference definitions CVE-2026-111759 — markdown-it: markdown-it: Denial of Service via mismatched quote parsing CVE-2026-111767 — @modelcontextprotocol/sdk: @modelcontextprotocol/sdk: Unauthorized cross-session task access via taskStore CVE-2026-112075 — unsloth: unsloth: Arbitrary code execution via unsafe class selection CVE-2026-112307 — sqlparse: sqlparse: Arbitrary code execution via unescaped PHP output formatting CVE-2026-112390 — pillow: Pillow: Denial of Service via infinite loop during crafted MIC image parsing CVE-2026-112391 — pillow: Pillow: Denial of Service via unbounded recursion in PDF parser CVE-2026-112392 — pillow: pillow: Denial of Service via zero-size images in rank filters CVE-2026-112393 — pillow: Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO CVE-2026-112397 — pillow: pillow: Denial of Service via out-of-bounds memory access on zero-width images CVE-2026-112398 — pillow: Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution CVE-2026-112399 — pillow: pillow: Denial of service via crafted APNG image CVE-2026-112400 — pillow: pillow: Denial of Service via memory exhaustion from crafted GIF image CVE-2026-112402 — pillow: pillow: Denial of service via double free during image transformation CVE-2026-112403 — pillow: Pillow: Heap buffer overflow in ImagingJpegDecode CVE-2026-112404 — pillow: Pillow: Denial of Service via out-of-bounds read in TIFF decoding CVE-2026-112405 — pillow: Pillow: Denial of Service via null pointer dereference in Image.merge() CVE-2026-112406 — pillow: pillow: Denial of Service via infinite loop during PDF page rewriting CVE-2026-112892 — pillow: pillow: Denial of Service via unbounded memory expansion in MSP image decoder CVE-2026-112893 — pillow: Pillow: Denial of Service via invalid pointer free during font rendering CVE-2026-112894 — pillow: pillow: Denial of Service via crafted multi-frame image conversion CVE-2026-112895 — pillow: pillow: Denial of service via crafted PDF during append operations CVE-2026-112896 — pillow: Pillow: Denial of Service via out-of-bounds read in TIFF encoder CVE-2026-112897 — pillow: pillow: Information disclosure via uninitialized buffer in TIFF decoding CVE-2026-112940 — filelock: filelock: Arbitrary file overwrite via insecure database file reopening CVE-2026-113718 — virtualenv: virtualenv: arbitrary code execution via improper quoting in xonsh activation scripts CVE-2026-113722 — virtualenv: virtualenv: arbitrary code execution via improperly quoted interpreter paths in script launchers CVE-2026-113723 — virtualenv: virtualenv: Arbitrary code execution via malicious prompt text CVE-2026-113725 — virtualenv: virtualenv: arbitrary code execution via crafted environment name CVE-2026-113726 — virtualenv: virtualenv: Arbitrary command execution via unescaped prompt variables in zsh CVE-2026-113732 — virtualenv: virtualenv: Arbitrary code execution via improperly quoted Fish activation scripts CVE-2026-113776 — virtualenv: virtualenv: Arbitrary command execution via sequential placeholder substitution in activation templates CVE-2026-114050 — vllm: vllm: Denial of Service via multimodal cache desynchronization CVE-2026-114051 — vllm: vllm: Denial of Service via improper token parameter validation CVE-2026-114052 — vllm: vLLM: Denial of Service via unbounded processor caching in MOSS-Audio CVE-2026-114053 — vllm: vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revision CVE-2026-114055 — vllm: vLLM: Denial of Service via unvalidated multimodal processor arguments CVE-2026-114102 — adm-zip: adm-zip: Denial of Service via malformed ZIP archive decompression CVE-2026-114135 — jupyter-server: jupyter-server: Unauthorized code execution via missing authorization check in gateway handler CVE-2026-114140 — nbconvert: nbconvert: arbitrary file write via path traversal in ExtractOutputPreprocessor CVE-2026-114145 — GitPython: GitPython: arbitrary code execution via improper submodule path validation CVE-2026-114406 — ca-certificates: Distrust eMudhra intermediate CA certificates due to security concerns CVE-2026-114605 — dnspython: dnspython: Denial of Service via excessive DNS compression pointer traversal CVE-2026-114613 — msgpack: msgpack: Denial of Service via memory leak during map deserialization CVE-2026-115347 — mistune: mistune: Denial of Service via unmatched square brackets CVE-2026-115348 — mistune: mistune: Denial of Service via unbalanced brackets in link parser CVE-2026-115349 — mistune: mistune: Denial of Service via deeply nested square brackets CVE-2026-115352 — mistune: mistune: Denial of Service via unmatched brackets in inline link parser CVE-2026-115353 — mistune: Mistune before 3.3.0 Path Traversal via include Directive CVE-2026-115355 — mistune: mistune: Arbitrary file read via path traversal in Include directive CVE-2026-115586 — virtualenv: virtualenv: Arbitrary code execution via unescaped prompt in bash activation script CVE-2026-115912 — vllm: vllm: Arbitrary code execution via forged shared-memory handles CVE-2026-115915 — vllm: vllm: Arbitrary code execution via unrestricted image format parsing CVE-2026-116176 — vllm: vllm: Information disclosure via SSRF in X-Request-Id header CVE-2026-116177 — vllm: vllm: Denial of Service via unconstrained image decompression CVE-2026-116179 — vllm: vLLM: Denial of Service via video frame limit bypass CVE-2026-116180 — vllm: vLLM: Denial of Service via uninitialized log probability tensors CVE-2026-116576 — systeminformation: systeminformation: Command injection via improper quotation mark sanitization CVE-2026-116690 — mlflow: mlflow: Information disclosure via improper path validation in model artifact locations CVE-2026-118623 — mlflow: mlflow: Arbitrary code execution via untrusted data deserialization in PickleEvaluationArtifact CVE-2026-118627 — mlflow: mlflow: Arbitrary code execution via untrusted SHAP model deserialization CVE-2026-118628 — mlflow: mlflow: Information disclosure via SSRF in get-artifacts CVE-2026-118669 — oauthlib: oauthlib: privilege escalation via client identity confusion in token grant handlers CVE-2026-118764 — minimatch: minimatch: Denial of Service via crafted glob pattern expansion CVE-2026-119025 — open: open: Arbitrary code execution via crafted URLs CVE-2026-119194 — pyasn1: pyasn1: Denial of Service via hash collisions in schemaless decoding CVE-2026-119195 — pyasn1: pyasn1: Denial of Service via quadratic processing of fragmented ASN.1 data CVE-2026-119196 — pyasn1: pyasn1: Denial of Service via constructed bit string decoding CVE-2026-119286 — graphql-core: graphql-core: Denial of Service via unbounded memory growth during document validation