Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
Red Hat OpenShift AI (RHOAI)/rhoai/odh-eval-hub-rhel9
Red Hat
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Distrust compromised intermediate certificates in crypto/x509
CVE-2026-111943 · GO-2026-6809
rustls-webpki
webpki-root-certs
Rust / Cargo
Go
Red Hat
High
Fix reported
2026-10-29
Lack of limit on size of parsed Range headers in net/http
CVE-2026-78667 · GO-2026-6609
stdlib
AWS Load Balancer Operator/albo/aws-load-balancer-rhel8-operator
Go
Red Hat
High
Fix reported
2026-10-16
Excessive CPU consumption from repeated initial window changes in net/http
CVE-2026-78669 · GO-2026-6611
golang.org/x/net
stdlib
Go
Red Hat
High
Fix reported
2026-10-16
Reject malformed ECH outer extension references in crypto/tls
CVE-2026-97031 · GO-2026-6607
stdlib
Exploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9
Go
Red Hat
High
Fix reported
2026-10-16
OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full
CVE-2026-81872 · GHSA-HJF4-FPHR-2H65
Version ranges need review.
go.opentelemetry.io/otel/sdk/log
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-10-02
OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning
CVE-2026-81871 · GHSA-W34Q-CM8F-9C5X
Version ranges need review.
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc
Assisted Installer for Red Hat OpenShift Container Platform 2/assisted/agent-preinstall-image-builder-rhel9
Go
Red Hat
Medium
Fix reported
2026-09-28
Denial of Service due to Panic in AWS SDK for Go v2 SDK EventStream Decoder
CVE-2026-89090 · GHSA-XMRV-PMRH-HHX2
Version ranges need review.
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
github.com/aws/aws-sdk-go-v2/service/bedrockagentcore
Go
Red Hat
Medium
Fix reported
2026-09-12
MLflow AI Gateway permits SSRF through an unvalidated api_base
CVE-2026-71211 · GHSA-H7X2-H6G9-P789
Version ranges need review.
mlflow
Red Hat OpenShift AI (RHOAI)/rhoai/odh-core-bff-rhel9
PyPI
Red Hat
High
No fix reported
2026-09-10
