Openshift ai

This hub aggregates every CVE we track for Openshift ai, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Openshift ai.

• CVE-2026-15154Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex6.5Jul 8, 2026
• CVE-2023-54365Traefik - Denial of Service via HTTP/2 Request Handling7.5Jun 23, 2026
• CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpointsKEV8.8May 8, 2026
• CVE-2026-40192Pillow is vulnerable to a FITS GZIP decompression bomb7.5Apr 15, 2026
• CVE-2026-1462Safe Mode Bypass in keras-team/keras7.8Apr 13, 2026
• CVE-2026-5483Odh-dashboard: odh dashboard kubernetes service account exposure8.5Apr 10, 2026
• CVE-2026-32281Inefficient policy validation in crypto/x5097.5Apr 8, 2026
• CVE-2025-12805Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy8.1Mar 26, 2026
• CVE-2026-33056tar-rs: unpack_in can chmod arbitrary directories by following symlinks6.5Mar 20, 2026
• CVE-2026-31958Tornado has a DoS due to too many multipart parts7.5Mar 11, 2026
• CVE-2026-27024pypdf has a possible infinite loop when processing TreeObject5.5Feb 20, 2026
• CVE-2026-25727time affected by a stack exhaustion denial of service attack6.5Feb 6, 2026
• CVE-2026-1761Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response8.6Feb 2, 2026
• CVE-2026-1299email BytesGenerator header injection due to unquoted newlines7.1Jan 23, 2026
• CVE-2025-12781base64.b64decode() always accepts "+/" characters, despite setting altchars5.3Jan 21, 2026