Skip to contentRed Hat Openshift Ai 2.16 vulnerabilities
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.16 +3 more +5 moreOdh-dashboard: odh dashboard kubernetes service account exposureCVE-2026-54838.5 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +19 more +21 moreundici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits ValidationCVE-2026-2229Fix available7.5 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +18 more +20 moreundici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the clientCVE-2026-1528Fix available7.5 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 on rhel 9 +19 more +21 moreundici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate DecompressionCVE-2026-1526Fix available7.5 High
- webreflection flatted, red hat cluster observability operator 1.5.0, cryostat 4 +29 more +31 moreflatted: Unbounded recursion DoS in parse() revive phaseCVE-2026-32141Fix available7.5 High
- svg svgo, red hat cryostat 4, gatekeeper 3 +45 more +47 moreSVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)CVE-2026-29074Fix available7.5 High
- ajv.js ajv, red hat confidential compute attestation, cryostat 4 +67 more +69 moreajv has ReDoS when using `$data` optionCVE-2025-69873Fix available2.9 Low
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios affected by Denial of Service via __proto__ Key in mergeConfigCVE-2026-25639Fix available7.5 High
- @clerk fastify, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +3 more +5 moreFastify's Content-Type header tab character allows body validation bypassCVE-2026-25223Fix available7.5 High
- go standard library net/url, golang go, red hat assisted installer for red hat openshift container platform 2 +160 more +162 moreMemory exhaustion in query parameter parsing in net/urlCVE-2025-61726Fix available7.5 High
- opendatahub-io opendatahub-operator, red hat openshift ai 2.16, openshift ai 2.19 +3 more +5 moreOpenshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster adminCVE-2025-10725Public exploit9.9 Critical
- red hat openshift ai 2.16, openshift ai 2.19, openshift ai 2.21 +2 more +4 moreOpenshift-ai: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578526.4 Medium
- red hat openshift ai (rhoai), openshift ai 2.16 +1 moreTrustyai-explainability: command injection via lmevaljob crCVE-2025-61935.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +8 more +10 morePam: improper hostname interpretation in pam_access leads to access control bypassCVE-2024-10963Fix available7.4 High