Openshift ai

This hub aggregates every CVE we track for Openshift ai, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Openshift ai.

• CVE-2026-15154Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex6.5Jul 8, 2026
• CVE-2023-54365Traefik - Denial of Service via HTTP/2 Request Handling7.5Jun 23, 2026
• CVE-2026-46625JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection7.5Jun 10, 2026
• CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksKEV6.5May 26, 2026
• CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpointsKEV8.8May 8, 2026
• CVE-2026-40192Pillow is vulnerable to a FITS GZIP decompression bomb7.5Apr 15, 2026
• CVE-2026-1462Safe Mode Bypass in keras-team/keras7.8Apr 13, 2026
• CVE-2026-5483Odh-dashboard: odh dashboard kubernetes service account exposure8.5Apr 10, 2026
• CVE-2026-32281Inefficient policy validation in crypto/x5097.5Apr 8, 2026
• CVE-2025-12805Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy8.1Mar 26, 2026
• CVE-2026-33056tar-rs: unpack_in can chmod arbitrary directories by following symlinks6.5Mar 20, 2026
• CVE-2026-31958Tornado has a DoS due to too many multipart parts7.5Mar 11, 2026
• CVE-2026-27024pypdf has a possible infinite loop when processing TreeObject5.5Feb 20, 2026
• CVE-2026-25727time affected by a stack exhaustion denial of service attack6.5Feb 6, 2026
• CVE-2026-1761Libsoup: stack-based buffer overflow in libsoup multipart response parsingmultipart http response8.6Feb 2, 2026