Vulnerabilities of Red Hat Red Hat OpenShift AI 3.4

Is your version affected?

CVE	Summary	Score	Published
CVE-2026-18948	A flaw was found in Feast	9.9 Critical	Aug 10, 2026
CVE-2026-14450	A flaw was found in the MaaS API	9.9 Critical	Aug 10, 2026
CVE-2026-15143	A flaw was found in the file_type content detector of guardrails-detectors	9.3 Critical	Jul 10, 2026
CVE-2026-15378	A flaw was found in the `guardrails-detectors` component	9.3 Critical	Jul 10, 2026
CVE-2026-56121	Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized…	9.3 Critical	Jun 24, 2026
CVE-2026-44727	Jupyter Server is the backend for Jupyter web applications	9.3 Critical	Jun 22, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critical	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-0545	In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or…	9.1 Critical	Apr 3, 2026