Red Hat OpenShift AI (RHOAI)/rhoai/odh-model-controller-rhel8

Red Hat · Package

15 reports

Vulnerability alerts

Report	Product	Ecosystem	Severity	Fix status	Last updated
Memory exhaustion in query parameter parsing in net/urlCVE-2025-61726 · GO-2026-4341	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-10-03
containerd CRI server: Host memory exhaustion through Attach goroutine leakCVE-2025-64329 · GHSA-M6HQ-P25P-FFR2Version ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerabilityCVE-2025-5197 · GHSA-9356-575X-2W9MVersion ranges need review.	transformers OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
tmp allows arbitrary temporary file / directory write via symbolic link `dir` parameterCVE-2025-54798 · GHSA-52F5-9888-HMC6	tmp Cryostat 4/io.cryostat-cryostat	npmRed Hat	Low	Fix reported	2026-09-10
Starlette has possible denial-of-service vector when parsing large files in multipart formsCVE-2025-54121 · GHSA-2C2J-9GV5-CJ73Version ranges need review.	starlette OpenShift Lightspeed/openshift-lightspeed/lightspeed-service-api-rhel9	PyPIRed Hat	Medium	Fix reported	2026-09-10
on-headers is vulnerable to http response header manipulationCVE-2025-7339 · GHSA-76C9-3JPH-RJ3Q	on-headers Cryostat 4/cryostat/cryostat-openshift-console-plugin-rhel9	npmRed Hat	Low	Fix reported	2026-09-10
golang.org/x/net vulnerable to Cross-site ScriptingCVE-2025-22872 · GHSA-VVGC-356P-C3XWVersion ranges need review.	golang.org/x/net Assisted Installer for Red Hat OpenShift Container Platform 2/rhai-tech-preview/assisted-installer-agent-rhel8	GoRed Hat	Medium	Fix reported	2026-09-10
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review.	github.com/containerd/containerd/v2 github.com/containerd/containerd	GoRed Hat	Medium	Fix reported	2026-09-10
Usage of ExtKeyUsageAny disables policy validation in crypto/x509CVE-2025-22874 · GO-2025-3749	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-27
Excessive resource consumption when printing error string for host certificate validation in crypto/x509CVE-2025-61729 · GO-2025-4155	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	High	Fix reported	2026-08-14
Incorrect results returned from Rows.Scan in database/sqlCVE-2025-47907 · GO-2025-3849	stdlib Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9	GoRed Hat	Medium	Fix reported	2026-05-30
Mishandling of corrupt central directory record in archive/zipCVE-2024-24789 · GO-2024-2888	stdlib Custom Metric Autoscaler operator for Red Hat Openshift/custom-metrics-autoscaler-tech-preview/custom-metrics-autoscaler-rhel8-operator	GoRed Hat	Medium	Fix reported	2026-03-23
prettier: prettier parseNestedCSS ReDoSCVE-2025-8263	Cryostat 4/io.cryostat-cryostat Migration Toolkit for Virtualization/migration-toolkit-virtualization/mtv-console-plugin-rhel9	Red Hat	Medium	No fix reported	Not recorded
istio: Istio: Firewall rule injection via annotation allows limited integrity impactCVE-2026-23766	ExternalDNS Operator/edo/external-dns-rhel8 ExternalDNS Operator/edo/external-dns-rhel9	Red Hat	Unknown	No fix reported	Not recorded
istio: Istio: Information disclosure and authentication bypass via JWKS resolver unavailabilityCVE-2026-31837	OpenShift Serverless/openshift-serverless-1/kn-eventing-istio-controller-rhel9 OpenShift Serverless/openshift-serverless-1/net-istio-controller-rhel9	Red Hat	High	No fix reported	Not recorded