Red Hat Security Advisory: Red Hat AI Inference Server 3.2.2 (CUDA)

Pillow is a Python imaging library.

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs).

A flaw was found in Python-Multipart, a tool for parsing multipart form data in Python applications.

wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427.

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs).

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs).

A flaw was found in vLLM, an inference and serving engine for large language models (LLMs).

urllib3 is an HTTP client library for Python.

A flaw was found in protobuf.

A flaw was found in Libtiff.

A flaw was found in the OpenSSL CMS implementation (RFC 3211 KEK Unwrap).

A flaw was found in libtiff.

A memory corruption flaw was found in SQLite.

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

A flaw was found in Fulcio, a free-to-use certificate authority.

A decompression handling flaw has been discovered in urllib3.

A remote code execution vulnerability has been identified in vLLM.

A flaw was found in urllib3 Python library that could lead to a Denial of Service condition.

A denial of service vulnerability has been discovered in the python Starlette framework.

A flaw was found in Ray’s HTTP API endpoint handling (e.g.

A vulnerability in vLLM allows an authenticated user to trigger unintended tokenization during chat template processing by supplying craf…

A Server-Side Request Forgery (SSRF) vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set.

A denial-of-service vulnerability in vLLM allows an attacker with API access to crash the engine by submitting multimodal embedding tenso…

A vulnerability in vLLM allows attackers to supply malicious serialized prompt-embedding tensors that are deserialized using torch.load()…