All products

Red Hat OpenShift AI (RHOAI)/rhoai/odh-feature-server-rhel8

Red Hat · Package
7 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Requests vulnerable to .netrc credentials leak via malicious URLsCVE-2024-47081 · GHSA-9HJG-9R4M-MVJ7Version ranges need review. requestsAssisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
urllib3 redirects are not disabled when retries are disabled on PoolManager instantiationCVE-2025-50181 · GHSA-PQ67-6M6Q-MJ2VVersion ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
protobuf-python has a potential Denial of Service issueCVE-2025-4565 · GHSA-8QVM-5X2C-J2W7Version ranges need review. protobufOpenShift Service Mesh 3/openshift-service-mesh-dev-preview-beta/istio-ztunnel-rhel9 PyPIRed Hat High Fix reported
urllib3 does not control redirects in browsers and Node.jsCVE-2025-50182 · GHSA-48P4-8XCF-VXJ5Version ranges need review. urllib3Assisted Installer for Red Hat OpenShift Container Platform 2/rhai/assisted-installer-agent-rhel9 PyPIRed Hat Medium Fix reported
`idna` accepts Punycode labels that do not produce any non-ASCII when decodedCVE-2024-12224 · GHSA-H97M-WW89-6JMQVersion ranges need review. idnaOpenShift Serverless/openshift-serverless-1/kn-plugin-func-func-util-rhel8 Rust / CargoRed Hat Medium Fix reported
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteCVE-2025-47273 · GHSA-5RJG-FVGR-3XXFVersion ranges need review. setuptoolsConfidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 PyPIRed Hat High Fix reported
crossbeam-channel Vulnerable to Double Free on DropCVE-2025-4574 · GHSA-PG9F-39PC-QF8GVersion ranges need review. crossbeam-channelRed Hat Enterprise Linux 10/389-ds-base Rust / CargoRed Hat Medium Fix reported