VendorsRed Hatopenshift_aiany version
Vulnerabilities

Red Hat OpenShift AI any version

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

11CVEs
CVE-2026-5483
Odh-dashboard: odh dashboard kubernetes service account exposure
Published 2026-04-10 · Modified
9.9EPSS 0.005
CVE-2026-58016
Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"
Published 2026-06-30 · Analyzed
9.1EPSS 0.006
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
Published 2026-05-08 · Analyzed
8.8KEVEPSS 0.914
CVE-2024-7557
Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
Published 2024-08-08 · Modified
8.8EPSS 0.010
CVE-2026-1462
Safe Mode Bypass in keras-team/keras
Published 2026-04-13 · Modified
8.8EPSS 0.004
CVE-2023-54365
Traefik - Denial of Service via HTTP/2 Request Handling
Published 2026-06-23 · Analyzed
8.7EPSS 0.006
CVE-2026-39979
jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers
Published 2026-04-13 · Analyzed
8.2EPSS 0.006
CVE-2026-4775
Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing
Published 2026-03-24 · Analyzed
7.8EPSS 0.006
CVE-2026-46625
JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection
Published 2026-06-10 · Modified
7.5EPSS 0.009
CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Published 2026-05-26 · Analyzed
6.5KEVEPSS 0.703
CVE-2026-15154
Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex
Published 2026-07-08 · Modified
6.5EPSS 0.005