Red Hat Enterprise Linux AI

Latest vulnerabilities

• CVE-2026-87742 CVSS 7.5 high A flaw was found in quarkus-websockets-next. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by streaming…
• CVE-2026-18393 CVSS 5.4 medium A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted…
• CVE-2026-44578 CVSS 8.6 high Next.js is a React framework for building full-stack web applications. From 13.4.13 to before 15.5.16 and 16.2.5, self-hosted applications…
• CVE-2026-44577 CVSS 5.9 medium Next.js is a React framework for building full-stack web applications. From 10.0.0 to before 15.5.16 and 16.2.5, when self-hosting Next.js…
• CVE-2026-44573 CVSS 7.5 high Next.js is a React framework for building full-stack web applications. From 12.2.0 to before 15.5.16 and 16.2.5, Applications using the…
• CVE-2026-42338 CVSS 5.3 medium ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript. Prior to 10.1.1, Address6.group() and…
• CVE-2026-6859 CVSS 8.8 high A flaw was found in InstructLab. The `linux_train.py` script hardcodes `trust_remote_code=True` when loading models from HuggingFace. This…