RH
Product
Red Hat OpenShift AI 2.16
13
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 2Low 1
Watch
Add Red Hat OpenShift AI 2.16 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-2229 | 7.5 | Mar 12 | undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation Affected: All versions, or not specified |
| CVE-2026-1528 | 7.5 | Mar 12 | undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client Affected: All versions, or not specified |
| CVE-2026-1526 | 7.5 | Mar 12 | undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression Affected: All versions, or not specified |
| CVE-2026-32141 | 7.5 | Mar 12 | flatted: Unbounded recursion DoS in parse() revive phase Affected: All versions, or not specified |
| CVE-2026-29074 | 7.5 | Mar 6 | SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs) Affected: All versions, or not specified |
| CVE-2026-25639 | 7.5 | Feb 9 | Axios affected by Denial of Service via __proto__ Key in mergeConfig Affected: All versions, or not specified |
| CVE-2026-25223 | 7.5 | Feb 3 | Fastify's Content-Type header tab character allows body validation bypass Affected: All versions, or not specified |
| CVE-2024-10963 | 7.4 | Nov 7 | Pam: improper hostname interpretation in pam_access leads to access control bypass Affected: All versions, or not specified |
Showing 8
