Vulnerabilities of Red Hat Red Hat OpenShift AI 2.16

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-5483	A flaw was found in odh-dashboard in Red Hat Openshift AI	8.5 High	Apr 10, 2026
CVE-2026-2229	ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…	7.5 High	Mar 12, 2026
CVE-2026-1528	ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length	7.5 High	Mar 12, 2026
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-32141	flatted is a circular JSON parser	7.5 High	Mar 12, 2026
CVE-2026-29074	SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files	7.5 High	Mar 6, 2026
CVE-2025-69873	ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the…	2.9 Low	Feb 11, 2026
CVE-2026-25639	Axios is a promise based HTTP client for the browser and Node.js	7.5 High	Feb 9, 2026
CVE-2026-25223	Fastify is a fast and low overhead web framework, for Node.js	7.5 High	Feb 3, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2025-10725	A flaw was found in Red Hat Openshift AI Service	9.9 Critical	Sep 30, 2025
CVE-2025-57852	A container privilege escalation flaw was found in KServe ModelMesh container images	6.4 Medium	Sep 30, 2025
CVE-2025-6193	A command injection vulnerability was discovered in the TrustyAI Explainability toolkit	5.9 Medium	Jun 20, 2025
CVE-2024-10963	Pam: improper hostname interpretation in pam_access leads to access control bypass	7.4 High	Nov 7, 2024

Other Red Hat products