{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Inference Server 3.3.5 (Spyre) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Inference Server",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:30087",
        "url": "https://access.redhat.com/errata/RHSA-2026:30087"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-62164",
        "url": "https://access.redhat.com/security/cve/CVE-2025-62164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2025-66448",
        "url": "https://access.redhat.com/security/cve/CVE-2025-66448"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-10118",
        "url": "https://access.redhat.com/security/cve/CVE-2026-10118"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22773",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22773"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22778",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22778"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22807",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22807"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-24779",
        "url": "https://access.redhat.com/security/cve/CVE-2026-24779"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34588",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34588"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34982",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35385",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-37555",
        "url": "https://access.redhat.com/security/cve/CVE-2026-37555"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39979",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40164",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44431",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4775",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4775"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4786",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4786"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4878",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6100",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6100"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai/inference-server",
        "url": "https://www.redhat.com/en/products/ai/inference-server"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30087.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (Spyre)",
    "tracking": {
      "current_release_date": "2026-07-03T12:30:28+00:00",
      "generator": {
        "date": "2026-07-03T12:30:28+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2026:30087",
      "initial_release_date": "2026-06-25T19:29:10+00:00",
      "revision_history": [
        {
          "date": "2026-06-25T19:29:10+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-25T19:29:22+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-03T12:30:28+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AI Inference Server 3.3",
                "product": {
                  "name": "Red Hat AI Inference Server 3.3",
                  "product_id": "Red Hat AI Inference Server 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AI Inference Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le",
                  "product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d?arch=ppc64le\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1782352919"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
                  "product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a?arch=s390x\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1782352919"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-spyre-rhel9@sha256%3A906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9\u0026tag=1782352919"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-62164",
      "cwe": {
        "id": "CWE-787",
        "name": "Out-of-bounds Write"
      },
      "discovery_date": "2025-11-21T02:01:11.280042+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2416282"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A vulnerability in vLLM allows attackers to supply malicious serialized prompt-embedding tensors that are deserialized using torch.load() without validation. Due to PyTorch 2.8.0 disabling sparse-tensor integrity checks by default, a crafted tensor can bypass bounds checks and cause an out-of-bounds write during to_dense(), leading to a crash (DoS) and potentially remote code execution on the vLLM server.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: VLLM deserialization vulnerability leading to DoS and potential RCE",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is considered important rather than moderate because it involves unsafe deserialization leading to memory corruption in a network-reachable, unauthenticated API path. Unlike typical moderate flaws that may only allow limited DoS or require specific conditions, this issue allows an attacker to supply a crafted sparse tensor that triggers an out-of-bounds memory write during PyTorch\u2019s to_dense() conversion. Memory corruption in a server process handling untrusted input significantly elevates security risk because it can lead not only to a reliable crash but also to potential remote code execution, enabling full compromise of the vLLM service. Additionally, the affected code path is part of the standard Completions API workflow, making the attack surface broadly exposed in real deployments. The combination of remote exploitability, unauthenticated access, memory corruption, and potential RCE clearly positions this issue above a moderate classification and into an important severity level.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-62164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2416282",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2416282"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-62164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-62164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-62164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-62164"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/58fab50d82838d5014f4a14d991fdb9352c9c84b",
          "url": "https://github.com/vllm-project/vllm/commit/58fab50d82838d5014f4a14d991fdb9352c9c84b"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/27204",
          "url": "https://github.com/vllm-project/vllm/pull/27204"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-mrw7-hf4f-83pf",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-mrw7-hf4f-83pf"
        }
      ],
      "release_date": "2025-11-21T01:18:38.803000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "No mitigation is currently available that meets Red Hat Product Security\u2019s standards for usability, deployment, applicability, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: VLLM deserialization vulnerability leading to DoS and potential RCE"
    },
    {
      "cve": "CVE-2025-66448",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2025-12-01T23:01:07.198041+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2418152"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A remote code execution vulnerability has been identified in vLLM. An attacker can exploit a weakness in the model loading process to silently fetch and run unauthorized, malicious Python code on the host system. This happens because the engine mistakenly executes code from a remote repository referenced in a model\u0027s configuration, even when explicit security measures are set to prevent it.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Remote Code Execution via malicious model configuration",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat because vLLM, when deployed in a Red Hat environment, is susceptible to remote code execution. An attacker can craft a malicious model configuration that, when loaded, fetches and executes arbitrary Python code from a remote repository, even if `trust_remote_code` is explicitly set to `False`.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2025-66448"
        },
        {
          "category": "external",
          "summary": "RHBZ#2418152",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2418152"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2025-66448",
          "url": "https://www.cve.org/CVERecord?id=CVE-2025-66448"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2025-66448",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-66448"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/ffb08379d8870a1a81ba82b72797f196838d0c86",
          "url": "https://github.com/vllm-project/vllm/commit/ffb08379d8870a1a81ba82b72797f196838d0c86"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/28126",
          "url": "https://github.com/vllm-project/vllm/pull/28126"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8fr4-5q9j-m8gm",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-8fr4-5q9j-m8gm"
        }
      ],
      "release_date": "2025-12-01T22:45:42.566000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: vLLM: Remote Code Execution via malicious model configuration"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Quang Luong",
            "PrymEvol"
          ]
        }
      ],
      "cve": "CVE-2026-4775",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-03-24T14:23:23.826000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450768"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450768",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
        }
      ],
      "release_date": "2026-03-24T14:33:35.730000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
    },
    {
      "cve": "CVE-2026-4786",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-13T22:01:38.006388+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458049"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the Python `webbrowser.open()` API allows for command injection and arbitrary code execution when processing specially crafted URLs containing \"%action\". This bypasses a previous mitigation for CVE-2026-4519.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458049",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/148169",
          "url": "https://github.com/python/cpython/issues/148169"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/148170",
          "url": "https://github.com/python/cpython/pull/148170"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/"
        }
      ],
      "release_date": "2026-04-13T21:52:19.036000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ali Raza"
          ]
        }
      ],
      "cve": "CVE-2026-4878",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-03-26T06:56:21.213270+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451615"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451615",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        }
      ],
      "release_date": "2026-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
    },
    {
      "cve": "CVE-2026-6100",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-04-13T18:01:31.970255+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457932"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python\u0027s decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The severity of this flaw is somewhat mitigated on Red Hat platforms. By default processes are not executed with root user privilege and are limited in their scope which in turn limits the impact of this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457932",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6100",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d",
          "url": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2",
          "url": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20",
          "url": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/148395",
          "url": "https://github.com/python/cpython/issues/148395"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/148396",
          "url": "https://github.com/python/cpython/pull/148396"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/"
        }
      ],
      "release_date": "2026-04-13T17:15:47.606000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "AISLE Research"
          ],
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-10118",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-21T23:20:23+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460428"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Poppler\u0027s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important heap-based memory corruption flaw in Poppler\u0027s Splash backend. Processing a specially crafted PDF document can lead to an integer overflow, resulting in an undersized heap allocation and a subsequent out-of-bounds write. This could allow an attacker to achieve arbitrary code execution, disclose sensitive information, or cause a denial of service within the context of the application rendering the PDF. To successfully exploit this vulnerability the attacker needs to be able to supply the maliciously crafted PDF file to the application consuming poppler or trick the user to process the PDF file using the Poppler\u0027s backend.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460428",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460428"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10118",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10118",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715",
          "url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715"
        }
      ],
      "release_date": "2026-06-01T15:25:35.578000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted or suspicious PDF documents with applications that utilize the Poppler library for rendering. Limiting exposure to untrusted content can reduce the risk of exploitation.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication"
    },
    {
      "cve": "CVE-2026-22773",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-10T07:01:22.641229+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2428443"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted 1x1 pixel image to a vLLM engine serving multimodal models that use the Idefics3 vision model implementation. This leads to a tensor dimension mismatch, causing an unhandled runtime error and resulting in complete server termination, effectively a Denial of Service (DoS).",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: vLLM: Denial of Service via specially crafted image in multimodal model serving",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Moderate for Red Hat products. A remote attacker can trigger a denial of service in vLLM engines serving multimodal models that use the Idefics3 vision model by sending a specially crafted image, leading to complete server termination. This affects Red Hat AI Inference Server and Red Hat OpenShift AI (RHOAI) when configured with the vulnerable vLLM versions.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22773"
        },
        {
          "category": "external",
          "summary": "RHBZ#2428443",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2428443"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22773",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22773"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22773",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22773"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-grg2-63fw-f2qr",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-grg2-63fw-f2qr"
        }
      ],
      "release_date": "2026-01-10T06:39:02.276000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vllm: vLLM: Denial of Service via specially crafted image in multimodal model serving"
    },
    {
      "cve": "CVE-2026-22778",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2026-02-03T00:01:43.512265+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted video URL to vLLM\u0027s multimodal endpoint. This action causes vLLM to leak a heap memory address, significantly reducing the effectiveness of Address Space Layout Randomization (ASLR). This information disclosure can then be chained with a heap overflow vulnerability to achieve remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Remote code execution via invalid image processing in the multimodal endpoint.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Critical rather than Important because it allows unauthenticated remote code execution without requiring user interaction, ultimately leading to full compromise of the affected system. An attacker can provide a malicious video URL to a vulnerable vLLM inference endpoint, which causes the service to automatically retrieve and process attacker-controlled media content. During decoding, a heap overflow is triggered in the underlying video processing stack, enabling corruption of heap memory and potential overwriting of control structures to execute arbitrary commands on the host. In addition, an information disclosure condition can leak memory addresses, significantly weakening ASLR protections and making exploitation more reliable when combined with the heap overflow. Successful exploitation compromises the confidentiality, integrity, and availability of the system and can impact deployments such as Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, thereby meeting Red Hat\u2019s criteria for Critical severity rather than Important impact.\n\nThe vLLM vulnerability depends on CVE-2025-9951, as processing attacker-controlled media can trigger the JPEG2000 decoder heap overflow, which can then be exploited within the vLLM video handling pipeline to cause memory corruption and potentially achieve remote code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/31987",
          "url": "https://github.com/vllm-project/vllm/pull/31987"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32319",
          "url": "https://github.com/vllm-project/vllm/pull/32319"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/releases/tag/v0.14.1",
          "url": "https://github.com/vllm-project/vllm/releases/tag/v0.14.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv"
        }
      ],
      "release_date": "2026-02-02T21:09:53.265000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "vLLM: vLLM: Remote code execution via invalid image processing in the multimodal endpoint."
    },
    {
      "cve": "CVE-2026-22807",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-01-21T22:00:55.823882+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2431865"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability allows a remote attacker to achieve arbitrary code execution on the vLLM host during model loading. This occurs because vLLM loads Hugging Face `auto_map` dynamic modules without properly validating the `trust_remote_code` setting. By influencing the model repository or path, an attacker can execute malicious Python code at server startup, even before any API requests are handled.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Arbitrary code execution via untrusted model loading",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat as vLLM, an inference and serving engine for large language models, is vulnerable to arbitrary code execution. An attacker influencing the model repository or path can execute malicious Python code during server startup, affecting vLLM versions 0.10.1 through 0.13.x.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "RHBZ#2431865",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431865"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22807",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22807",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",
          "url": "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32194",
          "url": "https://github.com/vllm-project/vllm/pull/32194"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/releases/tag/v0.14.0",
          "url": "https://github.com/vllm-project/vllm/releases/tag/v0.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr"
        }
      ],
      "release_date": "2026-01-21T21:13:11.894000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that vLLM instances are configured to load models only from trusted and verified repositories. Restrict access to the model repository path to prevent unauthorized modification or introduction of malicious code. Implement strict access controls and integrity checks for all model sources.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vLLM: vLLM: Arbitrary code execution via untrusted model loading"
    },
    {
      "cve": "CVE-2026-24779",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-01-27T23:00:53.998772+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433624"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class, specifically within the load_from_url and load_from_url_async methods. An attacker can exploit differing interpretations of backslashes by Python parsing libraries used for host restrictions to bypass these restrictions. This allows the attacker to force the vLLM server to make arbitrary requests to internal network resources, potentially leading to information disclosure, denial of service, or unauthorized access within containerized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Server-Side Request Forgery allows internal network access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT Server-Side Request Forgery (SSRF) vulnerability in vLLM\u0027s `MediaConnector` allows an attacker to bypass host restrictions when processing user-provided URLs. This enables the vLLM server to be coerced into making arbitrary requests to internal network resources. This is critical in containerized deployments, including Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, where it could facilitate internal network reconnaissance and unauthorized access to other services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433624",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433624"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-24779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7",
          "url": "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32746",
          "url": "https://github.com/vllm-project/vllm/pull/32746"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc"
        }
      ],
      "release_date": "2026-01-27T22:01:13.808000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the vLLM service to only trusted clients. Implement strict network segmentation for vLLM pods in containerized environments to limit potential lateral movement. Ensure that vLLM instances are not exposed to untrusted external networks without proper access controls and input validation at the perimeter.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vLLM: vLLM: Server-Side Request Forgery allows internal network access"
    },
    {
      "cve": "CVE-2026-34588",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-06T16:02:38.673068+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker could exploit an integer overflow vulnerability in the `internal_exr_undo_piz()` function by providing a specially crafted EXR file. This flaw leads to out-of-bounds reads and writes, which may allow for arbitrary code execution or sensitive information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34588",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34588",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf",
          "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf"
        }
      ],
      "release_date": "2026-04-06T15:31:57.602000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file"
    },
    {
      "cve": "CVE-2026-34982",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-06T16:02:10.004743+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: arbitrary command execution via modeline sandbox bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to convince a user to open a specially crafted file. The arbitrary OS command execution is restricted to the privileges of the user running Vim, limiting the potential of a full system compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34982",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/01/1",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/01/1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615",
          "url": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0276",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0276"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9"
        }
      ],
      "release_date": "2026-04-06T15:16:48.809000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable the modeline support by adding the following command to the Vim configuration file:\n\n~~~\nset nomodeline\n~~~",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: arbitrary command execution via modeline sandbox bypass"
    },
    {
      "cve": "CVE-2026-35385",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-04-02T17:01:07.052864+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:30:59.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode"
    },
    {
      "cve": "CVE-2026-37555",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-29T17:00:55.901773+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463856"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libsndfile library. An integer overflow in the IMA ADPCM codec can occur when a specially crafted WAV audio file is processed, specifically with malicious samplesperblock and blocks values. This can lead to a heap-based buffer overflow, causing a crash to the application linked to the library and memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsndfile: integer overflow in ima_reader_init()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to be able to process a malicious WAV file with an application linked to the libsndfile library.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this flaw has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463856",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463856"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-37555",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-37555",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151",
          "url": "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151"
        },
        {
          "category": "external",
          "summary": "https://github.com/libsndfile/libsndfile/issues/833",
          "url": "https://github.com/libsndfile/libsndfile/issues/833"
        }
      ],
      "release_date": "2026-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted WAV files with the libsndfile library.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsndfile: integer overflow in ima_reader_init()"
    },
    {
      "cve": "CVE-2026-39979",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-13T23:01:01.219840+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458077"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply malformed JSON from a non-NUL-terminated buffer to an application using the `jv_parse_sized` function. This allows the attacker to trigger the out-of-bounds read, causing an application crash and potentially disclosing memory with no other security impact. As this issue affects the libjq library, it is more likely to be exposed to untrusted input. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458077",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f",
          "url": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p"
        }
      ],
      "release_date": "2026-04-13T22:18:56.252000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, manually ensure that every buffer is NUL-terminated before passing it to the \u0027jv_parse_sized\u0027 function.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers"
    },
    {
      "cve": "CVE-2026-40164",
      "cwe": {
        "id": "CWE-341",
        "name": "Predictable from Observable State"
      },
      "discovery_date": "2026-04-14T00:01:04.003115+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458084"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq\u0027s hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via crafted JSON object causing hash collisions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458084",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784",
          "url": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29"
        }
      ],
      "release_date": "2026-04-13T23:40:12.693000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions"
    },
    {
      "cve": "CVE-2026-44431",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-05-13T17:01:41.663622+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
        }
      ],
      "release_date": "2026-05-13T15:20:24.588000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
    },
    {
      "cve": "CVE-2026-44432",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-05-13T17:01:01.083841+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
        }
      ],
      "release_date": "2026-05-13T15:17:12.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
    },
    {
      "cve": "CVE-2026-48818",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-06-17T19:03:44.998691+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Starlette, a lightweight ASGI framework. On Windows systems, the StaticFiles component is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker can exploit this by providing a specially crafted Universal Naming Convention (UNC) path, which causes the system to initiate an outbound Server Message Block (SMB) connection. This action can expose the service account\u0027s NTLMv2 credentials, potentially leading to information disclosure or further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Starlette\u0027s StaticFiles component, which allows for NTLMv2 credential theft via specially crafted UNC paths, does not affect Red Hat products. The vulnerability is specific to Windows operating systems, and the vulnerable code is not present in Red Hat\u0027s supported configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5",
          "url": "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/pull/3287",
          "url": "https://github.com/Kludex/starlette/pull/3287"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/releases/tag/1.1.0",
          "url": "https://github.com/Kludex/starlette/releases/tag/1.1.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r",
          "url": "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r"
        }
      ],
      "release_date": "2026-06-17T17:50:12.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:29:10+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30087",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30087"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:681d191e22994e4da2d4844219e2401ee363d4b3524cd19bb00076dce685a36a_s390x",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:906987407c1ed10139dadc5f8aef64584f407a6017467fce726e2e9c42d9f9c8_amd64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-spyre-rhel9@sha256:9c8187509c26e824143f51f9522d7b6457f3aea33e5f7983bb203e4bb231473d_ppc64le"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Inference Server 3.3.5 (ROCm) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Inference Server",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:30088",
        "url": "https://access.redhat.com/errata/RHSA-2026:30088"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-10118",
        "url": "https://access.redhat.com/security/cve/CVE-2026-10118"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22778",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22778"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22807",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22807"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-23490",
        "url": "https://access.redhat.com/security/cve/CVE-2026-23490"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-24779",
        "url": "https://access.redhat.com/security/cve/CVE-2026-24779"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34588",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34588"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34982",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35385",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35535",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35535"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-37555",
        "url": "https://access.redhat.com/security/cve/CVE-2026-37555"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39892",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39979",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40164",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44431",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4775",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4775"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4786",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4786"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48526"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48710",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48710"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48746",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48746"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4878",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6100",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6100"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai/inference-server",
        "url": "https://www.redhat.com/en/products/ai/inference-server"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30088.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (ROCm)",
    "tracking": {
      "current_release_date": "2026-07-04T12:39:57+00:00",
      "generator": {
        "date": "2026-07-04T12:39:57+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2026:30088",
      "initial_release_date": "2026-06-25T19:30:53+00:00",
      "revision_history": [
        {
          "date": "2026-06-25T19:30:53+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-25T19:31:05+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-04T12:39:57+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AI Inference Server 3.3",
                "product": {
                  "name": "Red Hat AI Inference Server 3.3",
                  "product_id": "Red Hat AI Inference Server 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AI Inference Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-rocm-rhel9@sha256%3A993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9\u0026tag=1782353093"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Quang Luong",
            "PrymEvol"
          ]
        }
      ],
      "cve": "CVE-2026-4775",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-03-24T14:23:23.826000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450768"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450768",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
        }
      ],
      "release_date": "2026-03-24T14:33:35.730000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
    },
    {
      "cve": "CVE-2026-4786",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-13T22:01:38.006388+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458049"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the Python `webbrowser.open()` API allows for command injection and arbitrary code execution when processing specially crafted URLs containing \"%action\". This bypasses a previous mitigation for CVE-2026-4519.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458049",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/148169",
          "url": "https://github.com/python/cpython/issues/148169"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/148170",
          "url": "https://github.com/python/cpython/pull/148170"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/"
        }
      ],
      "release_date": "2026-04-13T21:52:19.036000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ali Raza"
          ]
        }
      ],
      "cve": "CVE-2026-4878",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-03-26T06:56:21.213270+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451615"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451615",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        }
      ],
      "release_date": "2026-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
    },
    {
      "cve": "CVE-2026-6100",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-04-13T18:01:31.970255+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457932"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python\u0027s decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The severity of this flaw is somewhat mitigated on Red Hat platforms. By default processes are not executed with root user privilege and are limited in their scope which in turn limits the impact of this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457932",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6100",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d",
          "url": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2",
          "url": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20",
          "url": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/148395",
          "url": "https://github.com/python/cpython/issues/148395"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/148396",
          "url": "https://github.com/python/cpython/pull/148396"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/"
        }
      ],
      "release_date": "2026-04-13T17:15:47.606000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "AISLE Research"
          ],
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-10118",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-21T23:20:23+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460428"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Poppler\u0027s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important heap-based memory corruption flaw in Poppler\u0027s Splash backend. Processing a specially crafted PDF document can lead to an integer overflow, resulting in an undersized heap allocation and a subsequent out-of-bounds write. This could allow an attacker to achieve arbitrary code execution, disclose sensitive information, or cause a denial of service within the context of the application rendering the PDF. To successfully exploit this vulnerability the attacker needs to be able to supply the maliciously crafted PDF file to the application consuming poppler or trick the user to process the PDF file using the Poppler\u0027s backend.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460428",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460428"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10118",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10118",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715",
          "url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715"
        }
      ],
      "release_date": "2026-06-01T15:25:35.578000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted or suspicious PDF documents with applications that utilize the Poppler library for rendering. Limiting exposure to untrusted content can reduce the risk of exploitation.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication"
    },
    {
      "cve": "CVE-2026-22778",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2026-02-03T00:01:43.512265+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted video URL to vLLM\u0027s multimodal endpoint. This action causes vLLM to leak a heap memory address, significantly reducing the effectiveness of Address Space Layout Randomization (ASLR). This information disclosure can then be chained with a heap overflow vulnerability to achieve remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Remote code execution via invalid image processing in the multimodal endpoint.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Critical rather than Important because it allows unauthenticated remote code execution without requiring user interaction, ultimately leading to full compromise of the affected system. An attacker can provide a malicious video URL to a vulnerable vLLM inference endpoint, which causes the service to automatically retrieve and process attacker-controlled media content. During decoding, a heap overflow is triggered in the underlying video processing stack, enabling corruption of heap memory and potential overwriting of control structures to execute arbitrary commands on the host. In addition, an information disclosure condition can leak memory addresses, significantly weakening ASLR protections and making exploitation more reliable when combined with the heap overflow. Successful exploitation compromises the confidentiality, integrity, and availability of the system and can impact deployments such as Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, thereby meeting Red Hat\u2019s criteria for Critical severity rather than Important impact.\n\nThe vLLM vulnerability depends on CVE-2025-9951, as processing attacker-controlled media can trigger the JPEG2000 decoder heap overflow, which can then be exploited within the vLLM video handling pipeline to cause memory corruption and potentially achieve remote code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/31987",
          "url": "https://github.com/vllm-project/vllm/pull/31987"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32319",
          "url": "https://github.com/vllm-project/vllm/pull/32319"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/releases/tag/v0.14.1",
          "url": "https://github.com/vllm-project/vllm/releases/tag/v0.14.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv"
        }
      ],
      "release_date": "2026-02-02T21:09:53.265000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "vLLM: vLLM: Remote code execution via invalid image processing in the multimodal endpoint."
    },
    {
      "cve": "CVE-2026-22807",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-01-21T22:00:55.823882+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2431865"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability allows a remote attacker to achieve arbitrary code execution on the vLLM host during model loading. This occurs because vLLM loads Hugging Face `auto_map` dynamic modules without properly validating the `trust_remote_code` setting. By influencing the model repository or path, an attacker can execute malicious Python code at server startup, even before any API requests are handled.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Arbitrary code execution via untrusted model loading",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat as vLLM, an inference and serving engine for large language models, is vulnerable to arbitrary code execution. An attacker influencing the model repository or path can execute malicious Python code during server startup, affecting vLLM versions 0.10.1 through 0.13.x.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "RHBZ#2431865",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431865"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22807",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22807",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",
          "url": "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32194",
          "url": "https://github.com/vllm-project/vllm/pull/32194"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/releases/tag/v0.14.0",
          "url": "https://github.com/vllm-project/vllm/releases/tag/v0.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr"
        }
      ],
      "release_date": "2026-01-21T21:13:11.894000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that vLLM instances are configured to load models only from trusted and verified repositories. Restrict access to the model repository path to prevent unauthorized modification or introduction of malicious code. Implement strict access controls and integrity checks for all model sources.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vLLM: vLLM: Arbitrary code execution via untrusted model loading"
    },
    {
      "cve": "CVE-2026-23490",
      "cwe": {
        "id": "CWE-770",
        "name": "Allocation of Resources Without Limits or Throttling"
      },
      "discovery_date": "2026-01-16T20:03:33.790513+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2430472"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in pyasn1, a generic ASN.1 library for Python. A remote attacker could exploit this vulnerability by sending a specially crafted RELATIVE-OID with excessive continuation octets. This input validation vulnerability leads to memory exhaustion, resulting in a Denial of Service (DoS) for the affected system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-23490"
        },
        {
          "category": "external",
          "summary": "RHBZ#2430472",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2430472"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-23490",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-23490"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-23490"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970",
          "url": "https://github.com/pyasn1/pyasn1/commit/3908f144229eed4df24bd569d16e5991ace44970"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2",
          "url": "https://github.com/pyasn1/pyasn1/releases/tag/v0.6.2"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq",
          "url": "https://github.com/pyasn1/pyasn1/security/advisories/GHSA-63vm-454h-vhhq"
        }
      ],
      "release_date": "2026-01-16T19:03:36.442000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID"
    },
    {
      "cve": "CVE-2026-24779",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-01-27T23:00:53.998772+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433624"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class, specifically within the load_from_url and load_from_url_async methods. An attacker can exploit differing interpretations of backslashes by Python parsing libraries used for host restrictions to bypass these restrictions. This allows the attacker to force the vLLM server to make arbitrary requests to internal network resources, potentially leading to information disclosure, denial of service, or unauthorized access within containerized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Server-Side Request Forgery allows internal network access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT Server-Side Request Forgery (SSRF) vulnerability in vLLM\u0027s `MediaConnector` allows an attacker to bypass host restrictions when processing user-provided URLs. This enables the vLLM server to be coerced into making arbitrary requests to internal network resources. This is critical in containerized deployments, including Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, where it could facilitate internal network reconnaissance and unauthorized access to other services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433624",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433624"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-24779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7",
          "url": "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32746",
          "url": "https://github.com/vllm-project/vllm/pull/32746"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc"
        }
      ],
      "release_date": "2026-01-27T22:01:13.808000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the vLLM service to only trusted clients. Implement strict network segmentation for vLLM pods in containerized environments to limit potential lateral movement. Ensure that vLLM instances are not exposed to untrusted external networks without proper access controls and input validation at the perimeter.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vLLM: vLLM: Server-Side Request Forgery allows internal network access"
    },
    {
      "cve": "CVE-2026-34588",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-06T16:02:38.673068+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker could exploit an integer overflow vulnerability in the `internal_exr_undo_piz()` function by providing a specially crafted EXR file. This flaw leads to out-of-bounds reads and writes, which may allow for arbitrary code execution or sensitive information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34588",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34588",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf",
          "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf"
        }
      ],
      "release_date": "2026-04-06T15:31:57.602000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file"
    },
    {
      "cve": "CVE-2026-34982",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-06T16:02:10.004743+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: arbitrary command execution via modeline sandbox bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to convince a user to open a specially crafted file. The arbitrary OS command execution is restricted to the privileges of the user running Vim, limiting the potential of a full system compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34982",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/01/1",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/01/1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615",
          "url": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0276",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0276"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9"
        }
      ],
      "release_date": "2026-04-06T15:16:48.809000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable the modeline support by adding the following command to the Vim configuration file:\n\n~~~\nset nomodeline\n~~~",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: arbitrary command execution via modeline sandbox bypass"
    },
    {
      "cve": "CVE-2026-35385",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-04-02T17:01:07.052864+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:30:59.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode"
    },
    {
      "cve": "CVE-2026-35535",
      "cwe": {
        "id": "CWE-272",
        "name": "Least Privilege Violation"
      },
      "discovery_date": "2026-04-03T03:01:03.124541+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454714"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454714",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
        },
        {
          "category": "external",
          "summary": "https://bugs.debian.org/1130593",
          "url": "https://bugs.debian.org/1130593"
        },
        {
          "category": "external",
          "summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
          "url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
        },
        {
          "category": "external",
          "summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
          "url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
        },
        {
          "category": "external",
          "summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
          "url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
        }
      ],
      "release_date": "2026-04-03T02:21:33.584000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
    },
    {
      "cve": "CVE-2026-37555",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-29T17:00:55.901773+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463856"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libsndfile library. An integer overflow in the IMA ADPCM codec can occur when a specially crafted WAV audio file is processed, specifically with malicious samplesperblock and blocks values. This can lead to a heap-based buffer overflow, causing a crash to the application linked to the library and memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsndfile: integer overflow in ima_reader_init()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to be able to process a malicious WAV file with an application linked to the libsndfile library.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this flaw has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463856",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463856"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-37555",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-37555",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151",
          "url": "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151"
        },
        {
          "category": "external",
          "summary": "https://github.com/libsndfile/libsndfile/issues/833",
          "url": "https://github.com/libsndfile/libsndfile/issues/833"
        }
      ],
      "release_date": "2026-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted WAV files with the libsndfile library.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsndfile: integer overflow in ima_reader_init()"
    },
    {
      "cve": "CVE-2026-39892",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-08T22:00:59.416053+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456735"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In default configurations Red Hat products isolate service processes from total system access. Should an attacker be able to exploit this vulnerability their impact will be limited to that service account and they will not have access to the broader system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456735",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456735"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39892"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/08/12",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/08/12"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5",
          "url": "https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq",
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq"
        }
      ],
      "release_date": "2026-04-08T20:49:41.967000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API"
    },
    {
      "cve": "CVE-2026-39979",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-13T23:01:01.219840+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458077"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply malformed JSON from a non-NUL-terminated buffer to an application using the `jv_parse_sized` function. This allows the attacker to trigger the out-of-bounds read, causing an application crash and potentially disclosing memory with no other security impact. As this issue affects the libjq library, it is more likely to be exposed to untrusted input. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458077",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f",
          "url": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p"
        }
      ],
      "release_date": "2026-04-13T22:18:56.252000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, manually ensure that every buffer is NUL-terminated before passing it to the \u0027jv_parse_sized\u0027 function.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers"
    },
    {
      "cve": "CVE-2026-40164",
      "cwe": {
        "id": "CWE-341",
        "name": "Predictable from Observable State"
      },
      "discovery_date": "2026-04-14T00:01:04.003115+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458084"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq\u0027s hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via crafted JSON object causing hash collisions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458084",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784",
          "url": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29"
        }
      ],
      "release_date": "2026-04-13T23:40:12.693000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions"
    },
    {
      "cve": "CVE-2026-44431",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-05-13T17:01:41.663622+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
        }
      ],
      "release_date": "2026-05-13T15:20:24.588000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
    },
    {
      "cve": "CVE-2026-44432",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-05-13T17:01:01.083841+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
        }
      ],
      "release_date": "2026-05-13T15:17:12.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
    },
    {
      "cve": "CVE-2026-48526",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-28T16:01:22.805235+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2482734"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "RHBZ#2482734",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
        }
      ],
      "release_date": "2026-05-28T15:09:09.258000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
    },
    {
      "cve": "CVE-2026-48710",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-26T23:01:03.204374+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2481742"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is rated as Critical because path-based authentication and access control middleware can be completely bypassed by an unauthenticated remote attacker using a crafted HTTP Host header.\n\nStarlette reconstructs `request.url` by combining the HTTP Host header value with the request path, but performs no validation on the Host header. An attacker can inject path separators or query characters into the Host header (e.g., `Host: example.com/health?x=`), causing `request.url.path` to return a value that differs from the actual HTTP `request path` used for routing. Middleware that enforces authentication or authorization decisions based on `request.url.path` will evaluate the injected path rather than the real one, allowing the attacker to reach protected endpoints.\n\nWith regard to CVSS metrics, the Attack Vector (AV) is Network and Privileges Required (PR) is None, because the attack requires only the ability to send HTTP requests with a crafted Host header. User interaction is not required.\n\nRed Hat Satellite / Insights (IoP): The starlette package is included as a dependency of Connexion, but this flaw is rated Low impact because these services do not use path-based authentication middleware and all services are deployed behind reverse proxies. \n\nOpenShift Lightspeed (OLS): The starlette package is included as a dependency, but this flaw is rated Low impact because authentication is enforced via Kubernetes TokenReview/SubjectAccessReview through FastAPI dependency injection, not path-based middleware; request.url.path is only used for metrics and response header application.\n\nRHOAI Kubeflow Training images: starlette is being used as indirect dependency of mlflow, but this flaw is rated as Low impact because mlflow is used as client library only to store training metrics on remote server, it doesn\u0027t expose any endpoint.\n\nRHOAI odh-automl: The impact is reduced to Low since starlette is only used in the backend and it\u0027s transient dependency and starlette is not used at all to serve any endpoints.\n\nRHOAI odh-kserve-autogluon-server-rhel9: While the Starlette dependency is present in the build, the vulnerable code in starlette is not reachable. This reduces the impact to low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48710"
        },
        {
          "category": "external",
          "summary": "RHBZ#2481742",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481742"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48710",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48710"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710"
        },
        {
          "category": "external",
          "summary": "https://badhost.org",
          "url": "https://badhost.org"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6",
          "url": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr",
          "url": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml",
          "url": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml"
        },
        {
          "category": "external",
          "summary": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette",
          "url": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"
        },
        {
          "category": "external",
          "summary": "https://www.secwest.net/starlette",
          "url": "https://www.secwest.net/starlette"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette"
        }
      ],
      "release_date": "2026-05-26T21:54:54.393000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Deploying an RFC-compliant reverse proxy (such as nginx, Apache, HAProxy, or Caddy) in front of the ASGI server will reject malformed Host headers before they reach the application. This is the most straightforward mitigation that does not require code changes.\n\nIf custom middleware is present, it should be updated to use `request.scope[\"path\"]` instead of `request.url.path` for any security decisions. The ASGI scope path is derived from the HTTP request line and is not influenced by the Host header, so it reflects the actual request target.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header"
    },
    {
      "cve": "CVE-2026-48746",
      "cwe": {
        "id": "CWE-501",
        "name": "Trust Boundary Violation"
      },
      "discovery_date": "2026-06-22T23:00:57.824402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491581"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette\u0027s trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "CVE-2026-48746 is an authentication bypass in the vLLM OpenAI-compatible API server. A remote attacker who can reach the vLLM endpoint directly can craft a Host header so the authentication middleware checks a different URL path than the one actually dispatched, bypassing VLLM_API_KEY / --api-key protection. Successful exploitation allows unauthorized inference API access, which can result in confidentiality loss (model/prompt abuse) and availability impact (resource exhaustion). The flaw does not provide integrity compromise or arbitrary code execution. Exploitation requires vLLM API-key authentication to be enabled and the service to be exposed without an RFC-conforming reverse proxy that normalizes the Host header. Because Red Hat AI inference offerings are commonly deployed behind OpenShift Routes or similar proxies, and because the vulnerability is conditional on deployment and configuration, the overall flaw impact is rated Important rather than Critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48746"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491581",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491581"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48746",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48746"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/43426",
          "url": "https://github.com/vllm-project/vllm/pull/43426"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6"
        },
        {
          "category": "external",
          "summary": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette",
          "url": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette"
        }
      ],
      "release_date": "2026-06-22T21:57:28.997000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Restrict network access to the vLLM API endpoint to only trusted clients and internal networks. Implement firewall rules or network policies to limit inbound connections to the vLLM service, thereby reducing the attack surface. This operational control helps prevent unauthorized external access to the vulnerable API.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access"
    },
    {
      "cve": "CVE-2026-48818",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-06-17T19:03:44.998691+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Starlette, a lightweight ASGI framework. On Windows systems, the StaticFiles component is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker can exploit this by providing a specially crafted Universal Naming Convention (UNC) path, which causes the system to initiate an outbound Server Message Block (SMB) connection. This action can expose the service account\u0027s NTLMv2 credentials, potentially leading to information disclosure or further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Starlette\u0027s StaticFiles component, which allows for NTLMv2 credential theft via specially crafted UNC paths, does not affect Red Hat products. The vulnerability is specific to Windows operating systems, and the vulnerable code is not present in Red Hat\u0027s supported configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5",
          "url": "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/pull/3287",
          "url": "https://github.com/Kludex/starlette/pull/3287"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/releases/tag/1.1.0",
          "url": "https://github.com/Kludex/starlette/releases/tag/1.1.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r",
          "url": "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r"
        }
      ],
      "release_date": "2026-06-17T17:50:12.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:30:53+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30088",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30088"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows"
    }
  ]
}

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Critical"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Red Hat AI Inference Server 3.3.5 (CUDA) is now available.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Red Hat\u00ae AI Inference Server",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2026:30089",
        "url": "https://access.redhat.com/errata/RHSA-2026:30089"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-10118",
        "url": "https://access.redhat.com/security/cve/CVE-2026-10118"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22778",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22778"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-22807",
        "url": "https://access.redhat.com/security/cve/CVE-2026-22807"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-24779",
        "url": "https://access.redhat.com/security/cve/CVE-2026-24779"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34588",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34588"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-34982",
        "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-35385",
        "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-37555",
        "url": "https://access.redhat.com/security/cve/CVE-2026-37555"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39892",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-39979",
        "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-40164",
        "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44431",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-44432",
        "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4775",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4775"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4786",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4786"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48526",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48526"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48710",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48710"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48746",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48746"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-4878",
        "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-48818",
        "url": "https://access.redhat.com/security/cve/CVE-2026-48818"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/cve/CVE-2026-6100",
        "url": "https://access.redhat.com/security/cve/CVE-2026-6100"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/",
        "url": "https://access.redhat.com/security/updates/classification/"
      },
      {
        "category": "external",
        "summary": "https://www.redhat.com/en/products/ai/inference-server",
        "url": "https://www.redhat.com/en/products/ai/inference-server"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_30089.json"
      }
    ],
    "title": "Red Hat Security Advisory: Red Hat AI Inference Server 3.3.5 (CUDA)",
    "tracking": {
      "current_release_date": "2026-07-04T12:39:58+00:00",
      "generator": {
        "date": "2026-07-04T12:39:58+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "5.3.1"
        }
      },
      "id": "RHSA-2026:30089",
      "initial_release_date": "2026-06-25T19:32:31+00:00",
      "revision_history": [
        {
          "date": "2026-06-25T19:32:31+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2026-06-25T19:32:44+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2026-07-04T12:39:58+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat AI Inference Server 3.3",
                "product": {
                  "name": "Red Hat AI Inference Server 3.3",
                  "product_id": "Red Hat AI Inference Server 3.3",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:redhat:ai_inference_server:3.3::el9"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat AI Inference Server"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-cuda-rhel9@sha256%3Ad869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629?arch=amd64\u0026repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9\u0026tag=1782352847"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "amd64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
                "product": {
                  "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
                  "product_id": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
                  "product_identification_helper": {
                    "purl": "pkg:oci/vllm-cuda-rhel9@sha256%3A9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309?arch=arm64\u0026repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9\u0026tag=1782352847"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "arm64"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3",
          "product_id": "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        },
        "product_reference": "registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64",
        "relates_to_product_reference": "Red Hat AI Inference Server 3.3"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Quang Luong",
            "PrymEvol"
          ]
        }
      ],
      "cve": "CVE-2026-4775",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-03-24T14:23:23.826000+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2450768"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libtiff library. A remote attacker could exploit a signed integer overflow vulnerability in the putcontig8bitYCbCr44tile function by providing a specially crafted TIFF file. This flaw can lead to an out-of-bounds heap write due to incorrect memory pointer calculations, potentially causing a denial of service (application crash) or arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "A flaw in the libtiff library, affecting the processing of specially crafted TIFF files, could lead to a denial of service or potentially arbitrary code execution. This vulnerability, caused by a signed integer overflow during TIFF image processing, results in an out-of-bounds heap write. Red Hat products that process untrusted TIFF files using libtiff may be impacted.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "RHBZ#2450768",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2450768"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4775",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4775"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4775"
        }
      ],
      "release_date": "2026-03-24T14:33:35.730000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, avoid processing untrusted or maliciously crafted TIFF files with applications linked against the libtiff library. If processing untrusted TIFF files is unavoidable, consider running the affected applications within a sandboxed environment to limit the potential impact of successful exploitation. This operational control helps contain the effects of an out-of-bounds write, reducing the risk of denial of service or arbitrary code execution.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libtiff: libtiff: Arbitrary code execution or denial of service via signed integer overflow in TIFF file processing"
    },
    {
      "cve": "CVE-2026-4786",
      "cwe": {
        "id": "CWE-88",
        "name": "Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)"
      },
      "discovery_date": "2026-04-13T22:01:38.006388+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458049"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the Python webbrowser.open() API. If a specially crafted URL containing \"%action\" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This flaw in the Python `webbrowser.open()` API allows for command injection and arbitrary code execution when processing specially crafted URLs containing \"%action\". This bypasses a previous mitigation for CVE-2026-4519.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458049",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458049"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4786",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4786"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/148169",
          "url": "https://github.com/python/cpython/issues/148169"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/148170",
          "url": "https://github.com/python/cpython/pull/148170"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/JQDUNJVB4AQNTJECSUKOBDU3XCJIPSE5/"
        }
      ],
      "release_date": "2026-04-13T21:52:19.036000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "Ali Raza"
          ]
        }
      ],
      "cve": "CVE-2026-4878",
      "cwe": {
        "id": "CWE-367",
        "name": "Time-of-check Time-of-use (TOCTOU) Race Condition"
      },
      "discovery_date": "2026-03-26T06:56:21.213270+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2451615"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in libcap. A local unprivileged user can exploit a Time-of-check-to-time-of-use (TOCTOU) race condition in the `cap_set_file()` function. This allows an attacker with write access to a parent directory to redirect file capability updates to an attacker-controlled file. By doing so, capabilities can be injected into or stripped from unintended executables, leading to privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important flaw. A Time-of-Check-to-Time-of-Use (TOCTOU) race condition in libcap\u0027s cap_set_file() allows a local unprivileged user to escalate privileges. An attacker with write access to a parent directory can exploit a narrow window during file capability updates to redirect capabilities to an attacker-controlled file. This can lead to the injection of elevated privileges into an unintended executable when privileged processes, such as setcap or container tooling, invoke cap_set_file() on attacker-influenced paths.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "RHBZ#2451615",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451615"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-4878",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4878"
        },
        {
          "category": "external",
          "summary": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447554"
        }
      ],
      "release_date": "2026-04-06T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 6.7,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libcap: libcap: Privilege escalation via TOCTOU race condition in cap_set_file()"
    },
    {
      "cve": "CVE-2026-6100",
      "cwe": {
        "id": "CWE-825",
        "name": "Expired Pointer Dereference"
      },
      "discovery_date": "2026-04-13T18:01:31.970255+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2457932"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Python\u0027s decompression modules, including `lzma.LZMADecompressor`, `bz2.BZ2Decompressor`, and `gzip.GzipFile`. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is experiencing high memory usage. Exploitation of this flaw could potentially allow an attacker to execute arbitrary code or access sensitive data. The vulnerability is only present if the program re-uses decompressor instances across multiple decompression calls even after a `MemoryError` is raised during decompression. Using the helper functions to one-shot decompress data such as `lzma.decompress()`, `bz2.decompress()`, `gzip.decompress()`, and `zlib.decompress()` are not affected as a new decompressor instance is used per call. If the decompressor instance is not re-used after an error condition, this usage is similarly not vulnerable.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The severity of this flaw is somewhat mitigated on Red Hat platforms. By default processes are not executed with root user privilege and are limited in their scope which in turn limits the impact of this flaw.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "RHBZ#2457932",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457932"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-6100",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-6100"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d",
          "url": "https://github.com/python/cpython/commit/6a5f79c8d7bbf22b083b240910c7a8781a59437d"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2",
          "url": "https://github.com/python/cpython/commit/8fc66aef6d7b3ae58f43f5c66f9366cc8cbbfcd2"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20",
          "url": "https://github.com/python/cpython/commit/c3cf71c3366fe49acb776a639405c0eea6169c20"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/issues/148395",
          "url": "https://github.com/python/cpython/issues/148395"
        },
        {
          "category": "external",
          "summary": "https://github.com/python/cpython/pull/148396",
          "url": "https://github.com/python/cpython/pull/148396"
        },
        {
          "category": "external",
          "summary": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/",
          "url": "https://mail.python.org/archives/list/security-announce@python.org/thread/HTWB2Z6KT5QQX4RYEZAFININDHNOSIF3/"
        }
      ],
      "release_date": "2026-04-13T17:15:47.606000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules"
    },
    {
      "acknowledgments": [
        {
          "names": [
            "AISLE Research"
          ],
          "summary": "This issue was discovered by Red Hat."
        }
      ],
      "cve": "CVE-2026-10118",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-21T23:20:23+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2460428"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Poppler\u0027s Splash backend. A remote attacker could exploit this vulnerability by crafting a malicious PDF file that, when rendered, triggers an integer overflow in the `tilingPatternFill` function. This overflow leads to an undersized heap memory allocation, allowing a subsequent out-of-bounds write. Successful exploitation could result in arbitrary code execution, information disclosure, or denial of service within the context of the application processing the PDF.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This is an Important heap-based memory corruption flaw in Poppler\u0027s Splash backend. Processing a specially crafted PDF document can lead to an integer overflow, resulting in an undersized heap allocation and a subsequent out-of-bounds write. This could allow an attacker to achieve arbitrary code execution, disclose sensitive information, or cause a denial of service within the context of the application rendering the PDF. To successfully exploit this vulnerability the attacker needs to be able to supply the maliciously crafted PDF file to the application consuming poppler or trick the user to process the PDF file using the Poppler\u0027s backend.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "RHBZ#2460428",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2460428"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-10118",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-10118",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-10118"
        },
        {
          "category": "external",
          "summary": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715",
          "url": "https://gitlab.freedesktop.org/poppler/poppler/-/work_items/1715"
        }
      ],
      "release_date": "2026-06-01T15:25:35.578000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, users should avoid opening untrusted or suspicious PDF documents with applications that utilize the Poppler library for rendering. Limiting exposure to untrusted content can reduce the risk of exploitation.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 7.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "poppler: Integer overflow in Poppler SplashOutputDev::tilingPatternFill leads to heap buffer overflow via unchecked dimension multiplication"
    },
    {
      "cve": "CVE-2026-22778",
      "cwe": {
        "id": "CWE-209",
        "name": "Generation of Error Message Containing Sensitive Information"
      },
      "discovery_date": "2026-02-03T00:01:43.512265+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2436113"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A remote attacker can exploit this vulnerability by sending a specially crafted video URL to vLLM\u0027s multimodal endpoint. This action causes vLLM to leak a heap memory address, significantly reducing the effectiveness of Address Space Layout Randomization (ASLR). This information disclosure can then be chained with a heap overflow vulnerability to achieve remote code execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Remote code execution via invalid image processing in the multimodal endpoint.",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Critical rather than Important because it allows unauthenticated remote code execution without requiring user interaction, ultimately leading to full compromise of the affected system. An attacker can provide a malicious video URL to a vulnerable vLLM inference endpoint, which causes the service to automatically retrieve and process attacker-controlled media content. During decoding, a heap overflow is triggered in the underlying video processing stack, enabling corruption of heap memory and potential overwriting of control structures to execute arbitrary commands on the host. In addition, an information disclosure condition can leak memory addresses, significantly weakening ASLR protections and making exploitation more reliable when combined with the heap overflow. Successful exploitation compromises the confidentiality, integrity, and availability of the system and can impact deployments such as Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, thereby meeting Red Hat\u2019s criteria for Critical severity rather than Important impact.\n\nThe vLLM vulnerability depends on CVE-2025-9951, as processing attacker-controlled media can trigger the JPEG2000 decoder heap overflow, which can then be exploited within the vLLM video handling pipeline to cause memory corruption and potentially achieve remote code execution.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "RHBZ#2436113",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2436113"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22778",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22778",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22778"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/31987",
          "url": "https://github.com/vllm-project/vllm/pull/31987"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32319",
          "url": "https://github.com/vllm-project/vllm/pull/32319"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/releases/tag/v0.14.1",
          "url": "https://github.com/vllm-project/vllm/releases/tag/v0.14.1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-4r2x-xpjr-7cvv"
        }
      ],
      "release_date": "2026-02-02T21:09:53.265000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "vLLM: vLLM: Remote code execution via invalid image processing in the multimodal endpoint."
    },
    {
      "cve": "CVE-2026-22807",
      "cwe": {
        "id": "CWE-94",
        "name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
      },
      "discovery_date": "2026-01-21T22:00:55.823882+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2431865"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability allows a remote attacker to achieve arbitrary code execution on the vLLM host during model loading. This occurs because vLLM loads Hugging Face `auto_map` dynamic modules without properly validating the `trust_remote_code` setting. By influencing the model repository or path, an attacker can execute malicious Python code at server startup, even before any API requests are handled.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Arbitrary code execution via untrusted model loading",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This vulnerability is rated Important for Red Hat as vLLM, an inference and serving engine for large language models, is vulnerable to arbitrary code execution. An attacker influencing the model repository or path can execute malicious Python code during server startup, affecting vLLM versions 0.10.1 through 0.13.x.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "RHBZ#2431865",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2431865"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-22807",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-22807",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-22807"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5",
          "url": "https://github.com/vllm-project/vllm/commit/78d13ea9de4b1ce5e4d8a5af9738fea71fb024e5"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32194",
          "url": "https://github.com/vllm-project/vllm/pull/32194"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/releases/tag/v0.14.0",
          "url": "https://github.com/vllm-project/vllm/releases/tag/v0.14.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-2pc9-4j83-qjmr"
        }
      ],
      "release_date": "2026-01-21T21:13:11.894000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, ensure that vLLM instances are configured to load models only from trusted and verified repositories. Restrict access to the model repository path to prevent unauthorized modification or introduction of malicious code. Implement strict access controls and integrity checks for all model sources.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vLLM: vLLM: Arbitrary code execution via untrusted model loading"
    },
    {
      "cve": "CVE-2026-24779",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-01-27T23:00:53.998772+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2433624"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class, specifically within the load_from_url and load_from_url_async methods. An attacker can exploit differing interpretations of backslashes by Python parsing libraries used for host restrictions to bypass these restrictions. This allows the attacker to force the vLLM server to make arbitrary requests to internal network resources, potentially leading to information disclosure, denial of service, or unauthorized access within containerized environments.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vLLM: vLLM: Server-Side Request Forgery allows internal network access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This IMPORTANT Server-Side Request Forgery (SSRF) vulnerability in vLLM\u0027s `MediaConnector` allows an attacker to bypass host restrictions when processing user-provided URLs. This enables the vLLM server to be coerced into making arbitrary requests to internal network resources. This is critical in containerized deployments, including Red Hat AI Inference Server, Red Hat Enterprise Linux AI, and Red Hat OpenShift AI, where it could facilitate internal network reconnaissance and unauthorized access to other services.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "RHBZ#2433624",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2433624"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-24779",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-24779"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7",
          "url": "https://github.com/vllm-project/vllm/commit/f46d576c54fb8aeec5fc70560e850bed38ef17d7"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/32746",
          "url": "https://github.com/vllm-project/vllm/pull/32746"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-qh4c-xf7m-gxfc"
        }
      ],
      "release_date": "2026-01-27T22:01:13.808000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, restrict network access to the vLLM service to only trusted clients. Implement strict network segmentation for vLLM pods in containerized environments to limit potential lateral movement. Ensure that vLLM instances are not exposed to untrusted external networks without proper access controls and input validation at the perimeter.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vLLM: vLLM: Server-Side Request Forgery allows internal network access"
    },
    {
      "cve": "CVE-2026-34588",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-06T16:02:38.673068+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455408"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker could exploit an integer overflow vulnerability in the `internal_exr_undo_piz()` function by providing a specially crafted EXR file. This flaw leads to out-of-bounds reads and writes, which may allow for arbitrary code execution or sensitive information disclosure.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455408",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455408"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34588",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34588",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34588"
        },
        {
          "category": "external",
          "summary": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf",
          "url": "https://github.com/AcademySoftwareFoundation/openexr/security/advisories/GHSA-588r-cr5c-w6hf"
        }
      ],
      "release_date": "2026-04-06T15:31:57.602000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenEXR: OpenEXR: Arbitrary code execution and information disclosure via crafted EXR file"
    },
    {
      "cve": "CVE-2026-34982",
      "cwe": {
        "id": "CWE-78",
        "name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
      },
      "discovery_date": "2026-04-06T16:02:10.004743+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2455400"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Vim. A modeline is used to set specific editor options directly from a text file. However, the `complete`, `guitabtooltip`, `printheader` options and the `mapset` function lack proper security checks, allowing an attacker to bypass restrictions and cause arbitrary OS command execution.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: arbitrary command execution via modeline sandbox bypass",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this vulnerability, an attacker needs to convince a user to open a specially crafted file. The arbitrary OS command execution is restricted to the privileges of the user running Vim, limiting the potential of a full system compromise.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "RHBZ#2455400",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2455400"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-34982",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-34982"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/01/1",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/01/1"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615",
          "url": "https://github.com/vim/vim/commit/75661a66a1db1e1f3f1245c615"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/releases/tag/v9.2.0276",
          "url": "https://github.com/vim/vim/releases/tag/v9.2.0276"
        },
        {
          "category": "external",
          "summary": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9",
          "url": "https://github.com/vim/vim/security/advisories/GHSA-8h6p-m6gr-mpw9"
        }
      ],
      "release_date": "2026-04-06T15:16:48.809000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, disable the modeline support by adding the following command to the Vim configuration file:\n\n~~~\nset nomodeline\n~~~",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vim: arbitrary command execution via modeline sandbox bypass"
    },
    {
      "cve": "CVE-2026-35385",
      "cwe": {
        "id": "CWE-281",
        "name": "Improper Preservation of Permissions"
      },
      "discovery_date": "2026-04-02T17:01:07.052864+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2454469"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "RHBZ#2454469",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-35385",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385"
        },
        {
          "category": "external",
          "summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
          "url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
        },
        {
          "category": "external",
          "summary": "https://www.openssh.org/releasenotes.html#10.3p1",
          "url": "https://www.openssh.org/releasenotes.html#10.3p1"
        },
        {
          "category": "external",
          "summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
          "url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
        }
      ],
      "release_date": "2026-04-02T16:30:59.615000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode"
    },
    {
      "cve": "CVE-2026-37555",
      "cwe": {
        "id": "CWE-190",
        "name": "Integer Overflow or Wraparound"
      },
      "discovery_date": "2026-04-29T17:00:55.901773+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2463856"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the libsndfile library. An integer overflow in the IMA ADPCM codec can occur when a specially crafted WAV audio file is processed, specifically with malicious samplesperblock and blocks values. This can lead to a heap-based buffer overflow, causing a crash to the application linked to the library and memory corruption.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "libsndfile: integer overflow in ima_reader_init()",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this issue, an attacker needs to be able to process a malicious WAV file with an application linked to the libsndfile library.\n\nDefault Red Hat Enterprise Linux security features, including SELinux enforcement, Address Space Layout Randomization (ASLR) and NX (No-Execute) stack protection, significantly increase the difficulty of achieving arbitrary code execution, limiting the impact of this vulnerability.\n\nDue to these reasons, this flaw has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "RHBZ#2463856",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2463856"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-37555",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-37555",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-37555"
        },
        {
          "category": "external",
          "summary": "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151",
          "url": "https://github.com/libsndfile/libsndfile/commit/9a829113c88a51e57c1e46473e90609e4b7df151"
        },
        {
          "category": "external",
          "summary": "https://github.com/libsndfile/libsndfile/issues/833",
          "url": "https://github.com/libsndfile/libsndfile/issues/833"
        }
      ],
      "release_date": "2026-04-29T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Do not process untrusted WAV files with the libsndfile library.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "libsndfile: integer overflow in ima_reader_init()"
    },
    {
      "cve": "CVE-2026-39892",
      "cwe": {
        "id": "CWE-131",
        "name": "Incorrect Calculation of Buffer Size"
      },
      "discovery_date": "2026-04-08T22:00:59.416053+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2456735"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in the cryptography library. This vulnerability occurs when a non-contiguous buffer is passed to certain application programming interfaces (APIs) that accept Python buffers, such as Hash.update(). A remote attacker could exploit this to cause a buffer overflow, potentially leading to a denial of service.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "In default configurations Red Hat products isolate service processes from total system access. Should an attacker be able to exploit this vulnerability their impact will be limited to that service account and they will not have access to the broader system.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39892"
        },
        {
          "category": "external",
          "summary": "RHBZ#2456735",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456735"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39892",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39892"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39892",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39892"
        },
        {
          "category": "external",
          "summary": "http://www.openwall.com/lists/oss-security/2026/04/08/12",
          "url": "http://www.openwall.com/lists/oss-security/2026/04/08/12"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5",
          "url": "https://github.com/pyca/cryptography/commit/622d672e429a7cff836a23c5903683dbec1901f5"
        },
        {
          "category": "external",
          "summary": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq",
          "url": "https://github.com/pyca/cryptography/security/advisories/GHSA-p423-j2cm-9vmq"
        }
      ],
      "release_date": "2026-04-08T20:49:41.967000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.3,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API"
    },
    {
      "cve": "CVE-2026-39979",
      "cwe": {
        "id": "CWE-125",
        "name": "Out-of-bounds Read"
      },
      "discovery_date": "2026-04-13T23:01:01.219840+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458077"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command line JSON processor, specifically in the libjq API. Parsing a malformed JSON input from a non-NUL-terminated buffer using the `jv_parse_sized` function can cause an out-of-bounds read, resulting in an application crash and a possible memory disclosure within the error message generated by the parser.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "To exploit this flaw, an attacker needs to supply malformed JSON from a non-NUL-terminated buffer to an application using the `jv_parse_sized` function. This allows the attacker to trigger the out-of-bounds read, causing an application crash and potentially disclosing memory with no other security impact. As this issue affects the libjq library, it is more likely to be exposed to untrusted input. Due to these reasons, this vulnerability has been rated with an important severity.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458077",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458077"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-39979",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39979"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f",
          "url": "https://github.com/jqlang/jq/commit/2f09060afab23fe9390cce7cb860b10416e1bf5f"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-2hhh-px8h-355p"
        }
      ],
      "release_date": "2026-04-13T22:18:56.252000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "To mitigate this issue, manually ensure that every buffer is NUL-terminated before passing it to the \u0027jv_parse_sized\u0027 function.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: out-of-bounds read in jv_parse_sized() on error formatting for non-NUL-terminated buffers"
    },
    {
      "cve": "CVE-2026-40164",
      "cwe": {
        "id": "CWE-341",
        "name": "Predictable from Observable State"
      },
      "discovery_date": "2026-04-14T00:01:04.003115+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2458084"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in jq, a command-line JSON processor. A remote attacker could exploit this vulnerability by providing a specially crafted JSON object. This object leverages a weakness in jq\u0027s hashing algorithm, which uses a hardcoded, publicly known seed. By crafting the JSON object to cause hash collisions, an attacker can degrade the performance of JSON object hash table operations, leading to significant CPU exhaustion and a denial of service (DoS) for systems processing the malicious JSON data.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "jq: jq: Denial of Service via crafted JSON object causing hash collisions",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "RHBZ#2458084",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2458084"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-40164",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-40164"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784",
          "url": "https://github.com/jqlang/jq/commit/0c7d133c3c7e37c00b6d46b658a02244fdd3c784"
        },
        {
          "category": "external",
          "summary": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29",
          "url": "https://github.com/jqlang/jq/security/advisories/GHSA-wwj8-gxm6-jc29"
        }
      ],
      "release_date": "2026-04-13T23:40:12.693000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "jq: jq: Denial of Service via crafted JSON object causing hash collisions"
    },
    {
      "cve": "CVE-2026-44431",
      "cwe": {
        "id": "CWE-201",
        "name": "Insertion of Sensitive Information Into Sent Data"
      },
      "discovery_date": "2026-05-13T17:01:41.663622+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477167"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via `ProxyManager.connection_from_url().urlopen()` with `assert_same_host=False`, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitive information.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477167",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477167"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44431",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44431"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc"
        }
      ],
      "release_date": "2026-05-13T15:20:24.588000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.9,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers"
    },
    {
      "cve": "CVE-2026-44432",
      "cwe": {
        "id": "CWE-409",
        "name": "Improper Handling of Highly Compressed Data (Data Amplification)"
      },
      "discovery_date": "2026-05-13T17:01:01.083841+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2477154"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in urllib3, an HTTP client library for Python. This vulnerability allows a remote attacker to cause excessive resource consumption, such as high CPU usage and massive memory allocation, on the client side. This occurs when urllib3 attempts to decompress an entire HTTP response, even if only a partial read was requested, or when draining the connection after a partial decompression. This can lead to a Denial of Service (DoS) condition.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression",
          "title": "Vulnerability summary"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "RHBZ#2477154",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477154"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-44432",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44432"
        },
        {
          "category": "external",
          "summary": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j",
          "url": "https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j"
        }
      ],
      "release_date": "2026-05-13T15:17:12.611000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "urllib3: urllib3: Denial of Service due to excessive HTTP response decompression"
    },
    {
      "cve": "CVE-2026-48526",
      "cwe": {
        "id": "CWE-347",
        "name": "Improper Verification of Cryptographic Signature"
      },
      "discovery_date": "2026-05-28T16:01:22.805235+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2482734"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in PyJWT, a Python library for JSON Web Token (JWT) implementation. When decoding JWTs, the library fails to validate the use of JSON Web Keys (JWK) in the HMAC algorithm while also supporting asymmetric algorithms. This allows a remote attacker to use the issuer\u0027s public key as the secret key for the HMAC algorithm, leading to the ability to forge JWTs. This vulnerability can result in authentication bypass or unauthorized access.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important vulnerability in PyJWT allows for authentication bypass and unauthorized access. It occurs when a JWT verifier is misconfigured to accept both symmetric and asymmetric algorithms, and a public JSON Web Key is erroneously used as the HMAC secret. Red Hat products are only affected if they utilize this specific, non-standard verifier configuration.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "RHBZ#2482734",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2482734"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48526",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48526"
        },
        {
          "category": "external",
          "summary": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx",
          "url": "https://github.com/jpadilla/pyjwt/security/advisories/GHSA-xgmm-8j9v-c9wx"
        }
      ],
      "release_date": "2026-05-28T15:09:09.258000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens"
    },
    {
      "cve": "CVE-2026-48710",
      "cwe": {
        "id": "CWE-1289",
        "name": "Improper Validation of Unsafe Equivalence in Input"
      },
      "discovery_date": "2026-05-26T23:01:03.204374+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2481742"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "The impact is rated as Critical because path-based authentication and access control middleware can be completely bypassed by an unauthenticated remote attacker using a crafted HTTP Host header.\n\nStarlette reconstructs `request.url` by combining the HTTP Host header value with the request path, but performs no validation on the Host header. An attacker can inject path separators or query characters into the Host header (e.g., `Host: example.com/health?x=`), causing `request.url.path` to return a value that differs from the actual HTTP `request path` used for routing. Middleware that enforces authentication or authorization decisions based on `request.url.path` will evaluate the injected path rather than the real one, allowing the attacker to reach protected endpoints.\n\nWith regard to CVSS metrics, the Attack Vector (AV) is Network and Privileges Required (PR) is None, because the attack requires only the ability to send HTTP requests with a crafted Host header. User interaction is not required.\n\nRed Hat Satellite / Insights (IoP): The starlette package is included as a dependency of Connexion, but this flaw is rated Low impact because these services do not use path-based authentication middleware and all services are deployed behind reverse proxies. \n\nOpenShift Lightspeed (OLS): The starlette package is included as a dependency, but this flaw is rated Low impact because authentication is enforced via Kubernetes TokenReview/SubjectAccessReview through FastAPI dependency injection, not path-based middleware; request.url.path is only used for metrics and response header application.\n\nRHOAI Kubeflow Training images: starlette is being used as indirect dependency of mlflow, but this flaw is rated as Low impact because mlflow is used as client library only to store training metrics on remote server, it doesn\u0027t expose any endpoint.\n\nRHOAI odh-automl: The impact is reduced to Low since starlette is only used in the backend and it\u0027s transient dependency and starlette is not used at all to serve any endpoints.\n\nRHOAI odh-kserve-autogluon-server-rhel9: While the Starlette dependency is present in the build, the vulnerable code in starlette is not reachable. This reduces the impact to low.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48710"
        },
        {
          "category": "external",
          "summary": "RHBZ#2481742",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2481742"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48710",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48710"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48710"
        },
        {
          "category": "external",
          "summary": "https://badhost.org",
          "url": "https://badhost.org"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6",
          "url": "https://github.com/Kludex/starlette/commit/764dab0dcfb9033d75442d7a359645c9f94648c6"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr",
          "url": "https://github.com/Kludex/starlette/security/advisories/GHSA-86qp-5c8j-p5mr"
        },
        {
          "category": "external",
          "summary": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml",
          "url": "https://github.com/pypa/advisory-database/tree/main/vulns/starlette/PYSEC-2026-161.yaml"
        },
        {
          "category": "external",
          "summary": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette",
          "url": "https://ostif.org/disclosing-the-badhost-vulnerability-in-starlette"
        },
        {
          "category": "external",
          "summary": "https://www.secwest.net/starlette",
          "url": "https://www.secwest.net/starlette"
        },
        {
          "category": "external",
          "summary": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette",
          "url": "https://www.x41-dsec.de/lab/advisories/x41-2026-002-starlette"
        }
      ],
      "release_date": "2026-05-26T21:54:54.393000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Deploying an RFC-compliant reverse proxy (such as nginx, Apache, HAProxy, or Caddy) in front of the ASGI server will reject malformed Host headers before they reach the application. This is the most straightforward mitigation that does not require code changes.\n\nIf custom middleware is present, it should be updated to use `request.scope[\"path\"]` instead of `request.url.path` for any security decisions. The ASGI scope path is derived from the HTTP request line and is not influenced by the Host header, so it reflects the actual request target.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 6.5,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Critical"
        }
      ],
      "title": "starlette: Starlette: Security restriction bypass via malformed HTTP Host header"
    },
    {
      "cve": "CVE-2026-48746",
      "cwe": {
        "id": "CWE-501",
        "name": "Trust Boundary Violation"
      },
      "discovery_date": "2026-06-22T23:00:57.824402+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2491581"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in vLLM, an inference and serving engine for large language models (LLMs). This vulnerability, residing in ASGI web servers and Starlette\u0027s trust in them, allows an attacker to bypass the OpenAI API Authentication Middleware. This bypass enables unauthorized access to the API without requiring the configured VLLM_API_KEY or --api-key, leading to critical unauthorized operations.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "CVE-2026-48746 is an authentication bypass in the vLLM OpenAI-compatible API server. A remote attacker who can reach the vLLM endpoint directly can craft a Host header so the authentication middleware checks a different URL path than the one actually dispatched, bypassing VLLM_API_KEY / --api-key protection. Successful exploitation allows unauthorized inference API access, which can result in confidentiality loss (model/prompt abuse) and availability impact (resource exhaustion). The flaw does not provide integrity compromise or arbitrary code execution. Exploitation requires vLLM API-key authentication to be enabled and the service to be exposed without an RFC-conforming reverse proxy that normalizes the Host header. Because Red Hat AI inference offerings are commonly deployed behind OpenShift Routes or similar proxies, and because the vulnerability is conditional on deployment and configuration, the overall flaw impact is rated Important rather than Critical.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48746"
        },
        {
          "category": "external",
          "summary": "RHBZ#2491581",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2491581"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48746",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48746"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48746"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/pull/43426",
          "url": "https://github.com/vllm-project/vllm/pull/43426"
        },
        {
          "category": "external",
          "summary": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6",
          "url": "https://github.com/vllm-project/vllm/security/advisories/GHSA-94f4-hr76-p5j6"
        },
        {
          "category": "external",
          "summary": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette",
          "url": "https://x41-dsec.de/lab/advisories/x41-2026-002-starlette"
        }
      ],
      "release_date": "2026-06-22T21:57:28.997000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Restrict network access to the vLLM API endpoint to only trusted clients and internal networks. Implement firewall rules or network policies to limit inbound connections to the vLLM service, thereby reducing the attack surface. This operational control helps prevent unauthorized external access to the vulnerable API.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.1,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access"
    },
    {
      "cve": "CVE-2026-48818",
      "cwe": {
        "id": "CWE-918",
        "name": "Server-Side Request Forgery (SSRF)"
      },
      "discovery_date": "2026-06-17T19:03:44.998691+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "2490020"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "A flaw was found in Starlette, a lightweight ASGI framework. On Windows systems, the StaticFiles component is vulnerable to Server-Side Request Forgery (SSRF). A remote attacker can exploit this by providing a specially crafted Universal Naming Convention (UNC) path, which causes the system to initiate an outbound Server Message Block (SMB) connection. This action can expose the service account\u0027s NTLMv2 credentials, potentially leading to information disclosure or further attacks.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows",
          "title": "Vulnerability summary"
        },
        {
          "category": "other",
          "text": "This Important flaw in Starlette\u0027s StaticFiles component, which allows for NTLMv2 credential theft via specially crafted UNC paths, does not affect Red Hat products. The vulnerability is specific to Windows operating systems, and the vulnerable code is not present in Red Hat\u0027s supported configurations.",
          "title": "Statement"
        },
        {
          "category": "general",
          "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
          "title": "CVSS score applicability"
        }
      ],
      "product_status": {
        "fixed": [
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
          "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "RHBZ#2490020",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2490020"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2026-48818",
          "url": "https://www.cve.org/CVERecord?id=CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-48818",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-48818"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5",
          "url": "https://github.com/Kludex/starlette/commit/fd53168a7767b6b55ba5af787fd88f49e33cabc5"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/pull/3287",
          "url": "https://github.com/Kludex/starlette/pull/3287"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/releases/tag/1.1.0",
          "url": "https://github.com/Kludex/starlette/releases/tag/1.1.0"
        },
        {
          "category": "external",
          "summary": "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r",
          "url": "https://github.com/Kludex/starlette/security/advisories/GHSA-wqp7-x3pw-xc5r"
        }
      ],
      "release_date": "2026-06-17T17:50:12.399000+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2026-06-25T19:32:31+00:00",
          "details": "For more information visit https://access.redhat.com/errata/RHSA-2026:30089",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2026:30089"
        },
        {
          "category": "workaround",
          "details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
          "product_ids": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          },
          "products": [
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64",
            "Red Hat AI Inference Server 3.3:registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Important"
        }
      ],
      "title": "starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows"
    }
  ]
}