Aller au contenu

Vulnérabilités de Red Hat Red Hat OpenShift AI 2.16

Votre version est-elle touchée ?

CVE Résumé Score Publiée
CVE-2026-5483 A flaw was found in odh-dashboard in Red Hat Openshift AI 8.5 Élevée 10 avr. 2026
CVE-2026-2229 ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of… 7.5 Élevée 12 mars 2026
CVE-2026-1528 ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length 7.5 Élevée 12 mars 2026
CVE-2026-1526 The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during… 7.5 Élevée 12 mars 2026
CVE-2026-32141 flatted is a circular JSON parser 7.5 Élevée 12 mars 2026
CVE-2026-29074 SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files 7.5 Élevée 6 mars 2026
CVE-2025-69873 ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the… 2.9 Faible 11 févr. 2026
CVE-2026-25639 Axios is a promise based HTTP client for the browser and Node.js 7.5 Élevée 9 févr. 2026
CVE-2026-25223 Fastify is a fast and low overhead web framework, for Node.js 7.5 Élevée 3 févr. 2026
CVE-2025-61726 The net/url package does not set a limit on the number of query parameters in a query 7.5 Élevée 28 janv. 2026
CVE-2025-10725 A flaw was found in Red Hat Openshift AI Service 9.9 Critique 30 sept. 2025
CVE-2025-57852 A container privilege escalation flaw was found in KServe ModelMesh container images 6.4 Moyenne 30 sept. 2025
CVE-2025-6193 A command injection vulnerability was discovered in the TrustyAI Explainability toolkit 5.9 Moyenne 20 juin 2025
CVE-2024-10963 Pam: improper hostname interpretation in pam_access leads to access control bypass 7.4 Élevée 7 nov. 2024

Autres produits Red Hat