ai_inference_server vulnerabilities
CVEs whose affected-version data names the ai_inference_server package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
92 CVEsRSS
CVE-2025-50181Medium· 5.3urllib3: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation (CVE-2025-50181)
A flaw was found in urllib3. The `PoolManager` class allows redirects to be disabled by configuring retries in a specific manner, effectively bypassing intended HTTP redirection behavior. A network attacker can leverage this configuration …
▾ SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.47%via CSAF
CVE-2025-50182Medium· 5.3urllib3: urllib3 does not control redirects in browsers and Node.js (CVE-2025-50182)
A flaw was found in urllib3. The library fails to properly validate redirect URLs, allowing an attacker to manipulate redirect chains when used in environments like Pyodide utilizing the JavaScript Fetch API. This lack of validation can en…
▾ SunlitRed Hat · Red Hat Enterprise Linux 9EPSS 0.60%via CSAF