Security
فارسی
All products

Red Hat OpenShift AI (RHOAI)/rhoai/odh-model-registry-operator-rhel9

Red Hat · Package
27 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Distrust compromised intermediate certificates in crypto/x509CVE-2026-111943 · GO-2026-6809 rustls-webpkiwebpki-root-certs Rust / CargoGoRed Hat High Fix reported
Check all ancestor namespace transitions when rendering raw text in html in golang.org/x/netCVE-2026-97045 · GO-2026-6866 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat Medium Fix reported
Avoid quadratic complexity when coalescing text nodes in html in golang.org/x/netCVE-2026-78661 · GO-2026-6860 golang.org/x/netRed Hat OpenShift AI (RHOAI)/rhoai/odh-ai-gateway-operator-rhel9 GoRed Hat High Fix reported
Fix Javascript regexp context tracking in html/templateCVE-2026-56858 · GO-2026-6091 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-controller-rhel8 GoRed Hat High Fix reported
Add recursion depth guard during decode in encoding/xmlCVE-2026-56859 · GO-2026-6088 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
Panic parsing crafted input in x/text/secure/precis in golang.org/x/textCVE-2026-56851 · GO-2026-6629 golang.org/x/textRed Hat Hardened Images/golang1.25 GoRed Hat High Fix reported
HTTP/2 server crash due to HPACK encoder race in net/httpCVE-2026-97032 · GO-2026-6617 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Double flow control refund on HTTP/2 server streams in net/httpCVE-2026-78663 · GO-2026-6612 golang.org/x/netstdlib GoRed Hat Medium Fix reported
Lack of limit on size of parsed Range headers in net/httpCVE-2026-78667 · GO-2026-6609 stdlibExploit Intelligence/exploit-intelligence/agent-client-rhel9 GoRed Hat High Fix reported
Excessive CPU consumption from repeated initial window changes in net/httpCVE-2026-78669 · GO-2026-6611 golang.org/x/netstdlib GoRed Hat High Fix reported
Reject malformed ECH outer extension references in crypto/tlsCVE-2026-97031 · GO-2026-6607 stdlibExploit Intelligence/exploit-intelligence/exploit-intelligence-operator-controller-rhel9 GoRed Hat High Fix reported
Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/httpCVE-2026-56853 · GO-2026-6089 stdlibAWS Load Balancer Operator/albo/aws-load-balancer-operator GoRed Hat High Fix reported
OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logsCVE-2026-81870 · GHSA-8WMF-6V46-5GFGVersion ranges need review. go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpcgo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp GoRed Hat Low Fix reported
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame FragmentationCVE-2026-84304 · GHSA-VP52-PCJ8-J9QCVersion ranges need review. google.golang.org/grpcMulticluster Engine for Kubernetes/multicluster-engine/addon-manager-rhel9 GoRed Hat High Fix reported
gRPC-Go: xDS RBAC HTTP Filter bypass via mixed-case Header Matching and gRFC A41 validation evasionCVE-2026-84303 · GHSA-QC2Q-P7WX-3PX3Version ranges need review. google.golang.org/grpcRed Hat OpenShift AI (RHOAI)/rhoai/odh-kuberay-operator-controller-rhel9 GoRed Hat Medium Fix reported
Transformers is vulnerable to ReDoS attack through its DonutProcessor classCVE-2025-3933 · GHSA-37MW-44QP-F5JMVersion ranges need review. transformersOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 PyPIRed Hat Medium Fix reported
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityCVE-2025-5197 · GHSA-9356-575X-2W9MVersion ranges need review. transformersOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 PyPIRed Hat Medium Fix reported
Transformers's Improper Input Validation vulnerability can be exploited through username injectionCVE-2025-3777 · GHSA-PHHR-52QP-3MJ4Version ranges need review. transformersOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 PyPIRed Hat Low Fix reported
Starlette has possible denial-of-service vector when parsing large files in multipart formsCVE-2025-54121 · GHSA-2C2J-9GV5-CJ73Version ranges need review. starletteOpenShift Lightspeed/openshift-lightspeed/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
ReverseProxy forwards queries with more than urlmaxqueryparams parameters in net/http/httputilCVE-2026-39825 · GO-2026-4976 stdlibAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-rhel9 GoRed Hat Medium Fix reported