Vulnerabilities of Red Hat Red Hat OpenShift AI 2.25

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-24486	Python-Multipart is a streaming multipart parser for Python	8.6 High	Jan 27, 2026
CVE-2026-1260	Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created…	8.5 High	Jan 22, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2026-22807	vLLM is an inference and serving engine for large language models (LLMs)	8.8 High	Jan 21, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-0897	Allocation of Resources Without Limits or Throttling in the HDF5 weight loading component in Google Keras 3.0.0…	7.1 High	Jan 15, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2026-21884	React Router is a router for React	8.2 High	Jan 10, 2026
CVE-2025-59057	React Router is a router for React	7.6 High	Jan 10, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-69223	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	7.5 High	Jan 5, 2026
CVE-2025-11157	A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the…	7.8 High	Jan 1, 2026
CVE-2025-12103	A flaw was found in Red Hat Openshift AI Service	5.0 Medium	Oct 28, 2025

Other Red Hat products