{"document":{"aggregate_severity":{"namespace":"https://access.redhat.com/security/updates/classification/","text":"Moderate"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright © Red Hat, Inc. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"legal_disclaimer","text":"This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.","title":"Terms of Use"}],"publisher":{"category":"vendor","contact_details":"https://access.redhat.com/security/team/contact/","issuing_authority":"Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.","name":"Red Hat Product Security","namespace":"https://www.redhat.com"},"references":[{"category":"self","summary":"Canonical URL","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-95897.json"}],"title":"dask: Dask: Deserialization vulnerability in Loader component","tracking":{"current_release_date":"2026-09-23T01:21:41+00:00","generator":{"date":"2026-09-23T01:21:41+00:00","engine":{"name":"Red Hat SDEngine","version":"5.4.0"}},"id":"CVE-2026-95897","initial_release_date":"2026-09-23T00:30:14.623000+00:00","revision_history":[{"date":"2026-09-23T00:30:14.623000+00:00","number":"1","summary":"Initial version"},{"date":"2026-09-23T01:07:00+00:00","number":"2","summary":"Current version"},{"date":"2026-09-23T01:21:41+00:00","number":"3","summary":"Last generated version"}],"status":"final","version":"3"}},"product_tree":{"branches":[{"branches":[{"branches":[{"category":"product_name","name":"Red Hat AI Inference Server","product":{"name":"Red Hat AI Inference Server","product_id":"red_hat_ai_inference_server","product_identification_helper":{"cpe":"cpe:/a:redhat:ai_inference_server:3"}}}],"category":"product_family","name":"Red Hat AI Inference Server"},{"branches":[{"category":"product_name","name":"Red Hat Enterprise Linux AI (RHEL AI) 3","product":{"name":"Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3","product_identification_helper":{"cpe":"cpe:/a:redhat:enterprise_linux_ai:3"}}}],"category":"product_family","name":"Red Hat Enterprise Linux AI (RHEL AI) 3"},{"branches":[{"category":"product_name","name":"Red Hat OpenShift AI (RHOAI)","product":{"name":"Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai)","product_identification_helper":{"cpe":"cpe:/a:redhat:openshift_ai"}}}],"category":"product_family","name":"Red Hat OpenShift AI (RHOAI)"},{"category":"product_version","name":"rhaiis/vllm-cpu-rhel9","product":{"name":"rhaiis/vllm-cpu-rhel9","product_id":"rhaiis/vllm-cpu-rhel9","product_identification_helper":{"purl":"pkg:oci/vllm-cpu-rhel9@sha256:fb7791bbfea99e9f81529fe8cc1e7c834ca470585c27590e3d0a6834167cd436?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9"}}},{"category":"product_version","name":"rhaiis/vllm-cuda-rhel9","product":{"name":"rhaiis/vllm-cuda-rhel9","product_id":"rhaiis/vllm-cuda-rhel9","product_identification_helper":{"purl":"pkg:oci/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9"}}},{"category":"product_version","name":"rhaiis/vllm-tpu-rhel9","product":{"name":"rhaiis/vllm-tpu-rhel9","product_id":"rhaiis/vllm-tpu-rhel9","product_identification_helper":{"purl":"pkg:oci/vllm-tpu-rhel9@sha256:b1c12112a1e8a298645e10d34d44c9961a6121aa8d87fc5d65ad83e1ffa3c586?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9"}}},{"category":"product_version","name":"rhaii/vllm-cpu-rhel9","product":{"name":"rhaii/vllm-cpu-rhel9","product_id":"rhaii/vllm-cpu-rhel9","product_identification_helper":{"purl":"pkg:oci/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9"}}},{"category":"product_version","name":"rhaii/vllm-cuda-rhel9","product":{"name":"rhaii/vllm-cuda-rhel9","product_id":"rhaii/vllm-cuda-rhel9","product_identification_helper":{"purl":"pkg:oci/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9"}}},{"category":"product_version","name":"rhelai3/bootc-aws-cuda-rhel9","product":{"name":"rhelai3/bootc-aws-cuda-rhel9","product_id":"rhelai3/bootc-aws-cuda-rhel9","product_identification_helper":{"purl":"pkg:oci/bootc-aws-cuda-rhel9@sha256:a754d4d1126e98f203249414b3831182bb15ee6b3643452f167849defc642e4b?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9"}}},{"category":"product_version","name":"rhelai3/bootc-azure-cuda-rhel9","product":{"name":"rhelai3/bootc-azure-cuda-rhel9","product_id":"rhelai3/bootc-azure-cuda-rhel9","product_identification_helper":{"purl":"pkg:oci/bootc-azure-cuda-rhel9@sha256:df5b6edd1bdb055219a7385b6d5923f3262c3a408f92da734e3027af55fd593f?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9"}}},{"category":"product_version","name":"rhelai3/bootc-cuda-rhel9","product":{"name":"rhelai3/bootc-cuda-rhel9","product_id":"rhelai3/bootc-cuda-rhel9","product_identification_helper":{"purl":"pkg:oci/bootc-cuda-rhel9@sha256:b45f3bc25a7d3c9f3bfdc1de3be6db59f6c3109f62326d74fae14e832a797981?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9"}}},{"category":"product_version","name":"rhelai3/bootc-gcp-cuda-rhel9","product":{"name":"rhelai3/bootc-gcp-cuda-rhel9","product_id":"rhelai3/bootc-gcp-cuda-rhel9","product_identification_helper":{"purl":"pkg:oci/bootc-gcp-cuda-rhel9@sha256:bac5d435d156c3ddcb581d3ff05fdce9f72bd617c5b8435cede16bb17b7bf12e?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9"}}},{"category":"product_version","name":"rhoai/odh-feature-server-rhel9","product":{"name":"rhoai/odh-feature-server-rhel9","product_id":"rhoai/odh-feature-server-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-feature-server-rhel9@sha256:c5dd868cd66e7911969f60658d31b3714ed42f0e81b9512f89991a412bcb0fa9?repository_url=registry.redhat.io/rhoai/odh-feature-server-rhel9"}}},{"category":"product_version","name":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","product":{"name":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","product_id":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:61ebc00090a7b3edb1e19b2c0aa407fea02be75fd5dda4a5f315adb1c1d0a434?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","product":{"name":"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","product_id":"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:b112d5ddd58cfcbf396f9329fe19724af21a615734522f258841c5dd237955b1?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","product":{"name":"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","product_id":"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:22e6e780ac865b8b30089d1a2a9dcd864191f9c46c8822f2df6002a2a10694a8?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","product":{"name":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","product_id":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:8bf2de878394390a6254b889783bd87185b573d93487055364326e864a404dc7?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","product":{"name":"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","product_id":"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:b193935feddd12ff17ebaf9e5d8341064709fc8315dce5f701f07a836857ed81?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","product":{"name":"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","product_id":"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9@sha256:8d61dd22d1adf0fd7df80a65783e01fc6226e98f14a3ebde9bd5388dd9d21beb?repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:7b24ef41420bc79e19ff6349bb4760b2834bdc245eeb0b9191a8e77d90515a3a?repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:206018cabeb3389fcfb554cb1850c82e509483a2f98bf963d82031303adaaee5?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:f476e56ad00faaad5f2e26010f633233db2d4b299d7c5281e2f4ac46949b531b?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9@sha256:bea01cf15e94ac8e78f868c8a600ed77d98266aad0673d6e9756e3cc0c70f60c?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:0708626cd3b96dfb6a7bef4085872dc131b64340112c40f7c70e7139882e5412?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9@sha256:a9919e8b5cedd66870a6d6f464883ea3182ac749a72bb590e0298d3ae8a4f78a?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256:a7576aa1cc937aed60998024b5c3107848ef30d3a4e8129c75815a0efd71b09d?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9"}}},{"category":"product_version","name":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product":{"name":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product_id":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","product_identification_helper":{"purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:90da115e64c80fbf57802442848ff8eee18d8c38e6e30edfdb374bb94dd84735?repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"}}}],"category":"vendor","name":"Red Hat"}],"relationships":[{"category":"default_component_of","full_product_name":{"name":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","product_id":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9"},"product_reference":"rhaii/vllm-cpu-rhel9","relates_to_product_reference":"red_hat_ai_inference_server"},{"category":"default_component_of","full_product_name":{"name":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","product_id":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9"},"product_reference":"rhaii/vllm-cuda-rhel9","relates_to_product_reference":"red_hat_ai_inference_server"},{"category":"default_component_of","full_product_name":{"name":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","product_id":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9"},"product_reference":"rhaiis/vllm-cpu-rhel9","relates_to_product_reference":"red_hat_ai_inference_server"},{"category":"default_component_of","full_product_name":{"name":"rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","product_id":"red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9"},"product_reference":"rhaiis/vllm-cuda-rhel9","relates_to_product_reference":"red_hat_ai_inference_server"},{"category":"default_component_of","full_product_name":{"name":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","product_id":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9"},"product_reference":"rhaiis/vllm-tpu-rhel9","relates_to_product_reference":"red_hat_ai_inference_server"},{"category":"default_component_of","full_product_name":{"name":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9"},"product_reference":"rhelai3/bootc-aws-cuda-rhel9","relates_to_product_reference":"red_hat_enterprise_linux_ai_(rhel_ai)_3"},{"category":"default_component_of","full_product_name":{"name":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9"},"product_reference":"rhelai3/bootc-azure-cuda-rhel9","relates_to_product_reference":"red_hat_enterprise_linux_ai_(rhel_ai)_3"},{"category":"default_component_of","full_product_name":{"name":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9"},"product_reference":"rhelai3/bootc-cuda-rhel9","relates_to_product_reference":"red_hat_enterprise_linux_ai_(rhel_ai)_3"},{"category":"default_component_of","full_product_name":{"name":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","product_id":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9"},"product_reference":"rhelai3/bootc-gcp-cuda-rhel9","relates_to_product_reference":"red_hat_enterprise_linux_ai_(rhel_ai)_3"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-feature-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9"},"product_reference":"rhoai/odh-feature-server-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9"},"product_reference":"rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9"},"product_reference":"rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9"},"product_reference":"rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9"},"product_reference":"rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9"},"product_reference":"rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9"},"product_reference":"rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"},{"category":"default_component_of","full_product_name":{"name":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","product_id":"red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"},"product_reference":"rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9","relates_to_product_reference":"red_hat_openshift_ai_(rhoai)"}]},"vulnerabilities":[{"cve":"CVE-2026-95897","cwe":{"id":"CWE-502","name":"Deserialization of Untrusted Data"},"discovery_date":"2026-09-23T01:00:57.098448+00:00","ids":[{"system_name":"Red Hat Bugzilla ID","text":"2539074"}],"notes":[{"category":"description","text":"A flaw was found in Dask, specifically within the `from_npy_stack` function of the Loader component. A remote attacker could exploit this deserialization vulnerability through manipulation, potentially leading to a low impact on the confidentiality, integrity, and availability of data.","title":"Vulnerability description"},{"category":"summary","text":"dask: Dask: Deserialization vulnerability in Loader component","title":"Vulnerability summary"},{"category":"general","text":"The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.","title":"CVSS score applicability"}],"product_status":{"known_affected":["red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]},"references":[{"category":"self","summary":"Canonical URL","url":"https://access.redhat.com/security/cve/CVE-2026-95897"},{"category":"external","summary":"RHBZ#2539074","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2539074"},{"category":"external","summary":"https://www.cve.org/CVERecord?id=CVE-2026-95897","url":"https://www.cve.org/CVERecord?id=CVE-2026-95897"},{"category":"external","summary":"https://nvd.nist.gov/vuln/detail/CVE-2026-95897","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-95897"},{"category":"external","summary":"https://github.com/dask/dask/","url":"https://github.com/dask/dask/"},{"category":"external","summary":"https://github.com/dask/dask/issues/12578","url":"https://github.com/dask/dask/issues/12578"},{"category":"external","summary":"https://vuldb.com/cve/CVE-2026-95897","url":"https://vuldb.com/cve/CVE-2026-95897"},{"category":"external","summary":"https://vuldb.com/submit/953281","url":"https://vuldb.com/submit/953281"},{"category":"external","summary":"https://vuldb.com/vuln/408543","url":"https://vuldb.com/vuln/408543"},{"category":"external","summary":"https://vuldb.com/vuln/408543/cti","url":"https://vuldb.com/vuln/408543/cti"}],"release_date":"2026-09-23T00:30:14.623000+00:00","remediations":[{"category":"none_available","details":"Fix deferred","product_ids":["red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]}],"scores":[{"cvss_v3":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.5,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L","version":"3.1"},"products":["red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]}],"threats":[{"category":"impact","details":"Moderate","product_ids":["red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-feature-server-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9","red_hat_openshift_ai_(rhoai):rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9"]}],"title":"dask: Dask: Deserialization vulnerability in Loader component"}]}