Redhat Openshift Ai vulnerabilities

• redhat openshift ai, red hat openshift ai 2.25, openshift ai 3.3 +1 more +3 more Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex CVE-2026-15154 6.5 MediumJuly 8, 2026
• gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 more Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVE-2026-58016 Fix available 7.5 HighJune 30, 2026
• encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 more Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks CVE-2026-48710 In KEVPublic exploitFix available EPSS 70.3% 6.5 MediumMay 22, 2026
• js-cookie javascript cookie, js-cookie, red hat cryostat 4 on rhel 9 +24 more +26 more JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVE-2026-46625 Fix available 7.5 HighMay 21, 2026
• berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 more LiteLLM: Authenticated command execution via MCP stdio test endpoints CVE-2026-42271 In KEVPublic exploitFix available EPSS 91.4% 8.7 HighApril 25, 2026
• jqlang jq, red hat ai inference server 3.2, ai inference server 3.3 +38 more +40 more jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVE-2026-39979 Fix available 6.9 MediumApril 13, 2026
• keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 more Safe Mode Bypass in keras-team/keras CVE-2026-1462 Fix available 8.8 HighApril 13, 2026
• red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.16 +3 more +5 more Odh-dashboard: odh dashboard kubernetes service account exposure CVE-2026-5483 8.5 HighApril 10, 2026
• red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.25 +2 more Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy CVE-2025-12805 8.1 HighMarch 26, 2026
• libtiff, debian linux, red hat ai inference server 3.2 +30 more +32 more Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing CVE-2026-4775 Fix available 7.8 HighMarch 24, 2026
• redhat openshift ai, red hat openshift data science (rhods), rhoai-2.14-rhel-8 +1 more +3 more Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai CVE-2024-7557 8.8 HighAugust 8, 2024
• golang go, traefik, red hat openshift ai (rhoai) +2 more +4 more Traefik - Denial of Service via HTTP/2 Request Handling CVE-2023-54365 Fix available 8.7 HighOctober 17, 2023