Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift AI (RHOAI)/rhoai/odh-kserve-localmodel-controller-rhel9
Red Hat
· Package
9 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
knative.dev/pkg admission webhooks allow unbounded request-body memory exhaustion
CVE-2026-54462 · GHSA-2HW4-C9M4-F2FJ
Version ranges need review.
knative.dev/pkg
Builds for Red Hat OpenShift/openshift-builds/openshift-builds-controller-rhel10
Go
Red Hat
Medium
Fix reported
2026-11-06
compress zstd: Panic on two-block frames
CVE-2026-116591 · GHSA-FPMH-FRQ8-7RJ8
github.com/klauspost/compress/zstd
github.com/klauspost/compress
Go
Red Hat
High
Fix reported
2026-11-06
Distrust compromised intermediate certificates in crypto/x509
CVE-2026-111943 · GO-2026-6809
rustls-webpki
webpki-root-certs
Rust / Cargo
Go
Red Hat
High
Fix reported
2026-10-29
Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/net
CVE-2026-97045 · GO-2026-6866
golang.org/x/net
Red Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-28
Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/net
CVE-2026-78661 · GO-2026-6860
golang.org/x/net
Red Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9
Go
Red Hat
High
Fix reported
2026-10-28
Lack of limit on size of parsed Range headers in net/http
CVE-2026-78667 · GO-2026-6609
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator
Go
Red Hat
High
Fix reported
2026-10-16
Excessive CPU consumption from repeated initial window changes in net/http
CVE-2026-78669 · GO-2026-6611
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Reject malformed ECH outer extension references in crypto/tls
CVE-2026-97031 · GO-2026-6607
stdlib
Exploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9
Go
Red Hat
High
Fix reported
2026-10-16
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
