Vulnerabilities of Red Hat Red Hat OpenShift AI 2.25

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-42578	Netty is an asynchronous, event-driven network application framework	2.9 Low	May 13, 2026
CVE-2026-42581	Netty is an asynchronous, event-driven network application framework	5.8 Medium	May 13, 2026
CVE-2026-44432	urllib3 is an HTTP client library for Python	8.9 High	May 13, 2026
CVE-2026-42338	ip-address is a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScript	5.3 Medium	May 12, 2026
CVE-2026-42271	Exploited BerriAI LiteLLM Command Injection Vulnerability	8.7 High	May 8, 2026
CVE-2026-33811	When using LookupCNAME with the cgo DNS resolver, a very long CNAME response can trigger a double-free of C memory and a…	7.5 High	May 7, 2026
CVE-2026-39820	Well-crafted inputs reaching ParseAddress, ParseAddressList, and ParseDate were able to trigger excessive CPU exhaustion…	7.5 High	May 7, 2026
CVE-2026-42499	Pathological inputs could cause DoS through consumePhrase when parsing an email address according to RFC 5322	7.5 High	May 7, 2026
CVE-2026-33814	When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it…	7.5 High	May 7, 2026
CVE-2026-43868	Memory Allocation with Excessive Size Value vulnerability in Apache Thrift	Not rated	May 5, 2026
CVE-2026-43869	Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift	Not rated	May 5, 2026
CVE-2026-6321	fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its normalize()…	7.5 High	May 4, 2026
CVE-2026-42027	Arbitrary Class Instantiation via Model Manifest in Apache OpenNLP ExtensionLoader Versions Affected: before 1.9.5,…	Not rated	May 4, 2026
CVE-2026-42039	Axios is a promise based HTTP client for the browser and Node.js	6.9 Medium	Apr 24, 2026
CVE-2026-42041	Axios is a promise based HTTP client for the browser and Node.js	4.8 Medium	Apr 24, 2026
CVE-2026-42043	Axios is a promise based HTTP client for the browser and Node.js	7.2 High	Apr 24, 2026
CVE-2026-42033	Axios is a promise based HTTP client for the browser and Node.js	7.4 High	Apr 24, 2026
CVE-2026-40895	follow-redirects is an open source, drop-in replacement for Node's `http` and `https` modules that automatically follows…	6.9 Medium	Apr 21, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2026-40192	Pillow is a Python imaging library	8.7 High	Apr 15, 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critical	Apr 15, 2026
CVE-2026-1462	A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow…	8.8 High	Apr 13, 2026
CVE-2026-5483	A flaw was found in odh-dashboard in Red Hat Openshift AI	8.5 High	Apr 10, 2026
CVE-2025-62718	Axios is a promise based HTTP client for the browser and Node.js	6.3 Medium	Apr 9, 2026
CVE-2026-39892	cryptography has a buffer overflow if non-contiguous buffers were passed to APIs	6.9 Medium	Apr 8, 2026

Other Red Hat products