Security
فارسی
All products

Red Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-llmisvc-controller-rhel9

Red Hat · Package
22 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustionCVE-2026-54462 · GHSA-2HW4-C9M4-F2FJVersion ranges need review. knative.dev/pkgBuilds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10 GoRed Hat Medium Fix reported
compress zstd: Panic on two-block framesCVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8 github.com/klauspost/compress/zstdgithub.com/klauspost/compress GoRed Hat High Fix reported
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
Go JOSE: Panic during CBC-HMAC processingCVE-2026-116585 · GHSA-4W3G-JFJ2-CW2Q github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Go JOSE: Panics in JSON parsingCVE-2026-116586 · GHSA-VVM8-GF78-28G4 github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat Medium Fix reported
Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/netCVE-2026-97045 · GO-2026-6866 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat Medium Fix reported
Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/netCVE-2026-78661 · GO-2026-6860 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat High Fix reported
Go JOSE: DoS when parsing JWKs that contain RSA keysCVE-2026-116587 · GHSA-MGCC-CWW5-FP2Q github.com/go-jose/go-jose/v3github.com/go-jose/go-jose/v4 GoRed Hat High Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator GoRed Hat High Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 GoRed Hat High Fix reported
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsCVE-2026-81870 · GHSA-8WMF-6V46-5GFGVersion ranges need review. go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp GoRed Hat Low Fix reported
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream DecoderCVE-2026-89090 · GHSA-XMRV-PMRH-HHX2Version ranges need review. github.com/aws/aws-sdk-go-v2/aws/protocol/eventstreamgithub.com/aws/aws-sdk-go-v2/service/bedrockagentcore GoRed Hat Medium Fix reported
Docker: Race condition in docker cp allows creation of arbitrary empty files on the host via symlink swapCVE-2026-41568 · GHSA-VP62-88P7-QQF5Version ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat Medium Fix reported
Docker: `PUT /containers/{id}/archive` executes container binary on the hostCVE-2026-41567 · GHSA-X86F-5XW2-FM2RVersion ranges need review. github.com/docker/dockergithub.com/moby/moby/v2 GoRed Hat High Fix reported
Go Net HTML parser is vulnerable to denial of serviceCVE-2026-25680 · GHSA-5CV4-JP36-H3MWVersion ranges need review. golang.org/x/netAssisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9 GoRed Hat Medium Fix reported
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputilCVE-2026-39825 · GO-2026-4976 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported
Escaper bypass leads to XSS in html/templateCVE-2026-39826 · GO-2026-4980 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported