Vulnerabilities of Red Hat Red Hat OpenShift AI 2.25

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-18948	A flaw was found in Feast	9.9 Critical	Aug 10, 2026
CVE-2026-15143	A flaw was found in the file_type content detector of guardrails-detectors	9.3 Critical	Jul 10, 2026
CVE-2026-15378	A flaw was found in the `guardrails-detectors` component	9.3 Critical	Jul 10, 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critical	Jun 22, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-41242	protobufjs compiles protobuf definitions into JavaScript (JS) functions	9.4 Critical	Apr 18, 2026
CVE-2025-14813	: Use of a Broken or Risky Cryptographic Algorithm vulnerability in Legion of the Bouncy Castle Inc	9.3 Critical	Apr 15, 2026
CVE-2026-35030	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.4 Critical	Apr 6, 2026
CVE-2026-33186	gRPC-Go is the Go language implementation of gRPC	9.1 Critical	Mar 20, 2026
CVE-2026-28229	Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes	9.8 Critical	Mar 11, 2026
CVE-2025-14009	A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions	10.0 Critical	Feb 18, 2026
CVE-2026-22778	vLLM is an inference and serving engine for large language models (LLMs)	9.8 Critical	Feb 2, 2026

Other Red Hat products