RHSA-2026:42644 Red Hat Security Advisory: RHOAI 2.25.9 - Red Hat OpenShift AI
idna: idna accepts Punycode labels that do not produce any non-ASCII when decoded transformers: code execution when processing a malicious Perceiver model file transformers: code execution when processing a malicious Transformer-XL model file transformers: code execution when processing a malicious megatron_gpt2 model file transformers: code execution when converting a malicious SEW model checkpoint transformers: code execution when converting a malicious SEW-D model checkpoint transformers: code execution when converting a malicious HuBERT model checkpoint transformers: code execution when processing a malicious X-CLIP model file transformers: code execution when processing a malicious GLM4 model file aiohttp: aiohttp: Denial of Service via specially crafted POST request aiohttp: aiohttp: Denial of Service via memory exhaustion from crafted POST request python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite keras: Keras: Arbitrary file write via path traversal in archive extraction utilities vllm: vLLM: Denial of Service via specially crafted image in multimodal model serving vLLM: vLLM: Arbitrary code execution via untrusted model loading pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID python-multipart: Python-Multipart: Arbitrary file write via path traversal vulnerability vLLM: vLLM: Server-Side Request Forgery allows internal network access xgrammar: xgrammar: Denial of Service via multi-level nested syntax golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting vLLM: vLLM: Server-Side Request Forgery bypass via inconsistent URL parsing pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries vllm: vLLM: Remote code execution due to hardcoded trust_remote_code setting multipart: denial of service via maliciously crafted HTTP or multipart segment headers python-dotenv: python-dotenv: Arbitrary file overwrite via symbolic link following crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) ray: Ray Dashboard Path Traversal Leading to Local File Disclosure google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files pypdf: pypdf: Denial of Service via crafted PDF in non-strict mode BuildKit: github.com/moby/buildkit: BuildKit: Arbitrary file write and code execution via untrusted frontend net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame org.apache.logging.log4j/log4j-core: Apache Log4j Core: Log injection via CRLF sequences due to configuration attribute renames org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() net/mail: golang: Go net/mail: Denial of Service via crafted email inputs golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing cryptography: Cryptography: Buffer overflow via non-contiguous buffer in API net/mail: golang: net/mail: Denial of Service via pathological email address parsing mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header netty: io.netty/netty-handler-proxy: Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation netty: io.netty/netty-codec-http: Netty: HTTP Request Smuggling due to improper handling of conflicting HTTP/1.0 headers netty: io.netty/netty-codec-http: Netty: Incorrect HTTP response parsing leads to data confusion netty: io.netty/netty-codec-http: io.netty/netty-codec-http2: Netty: Denial of Service via unbounded memory allocation in HTTP content decompression Apache Thrift: Apache Thrift: Denial of Service via excessive memory allocation Apache Thrift: Apache Thrift: Security bypass due to improper certificate validation urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers urllib3: urllib3: Denial of Service due to excessive HTTP response decompression python-ujson: UltraJSON: Memory leak leading to Denial of Service python-pyjwt: PyJWT: Authentication bypass due to forged JSON Web Tokens vllm: starlette: vLLM: Critical authentication bypass allows unauthorized API access nltk: NLTK: Information Disclosure via Path Traversal in `nltk.data.load()`
CVSS v3.1 score: 7.5