RH
Product
Red Hat OpenShift AI 2.16
by Red Hat · last CVE Apr 10, 2026
13
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 2High 8Medium 2Low 1
Watch

Add Red Hat OpenShift AI 2.16 to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-2229
7.5
1%
Mar 12
undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation
Affected: All versions, or not specified
CVE-2026-1528
7.5
0%
Mar 12
undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client
Affected: All versions, or not specified
CVE-2026-1526
7.5
1%
Mar 12
undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression
Affected: All versions, or not specified
CVE-2026-32141
7.5
1%
Mar 12
flatted: Unbounded recursion DoS in parse() revive phase
Affected: All versions, or not specified
CVE-2026-29074
7.5
1%
Mar 6
SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)
Affected: All versions, or not specified
CVE-2026-25639
7.5
3%
Feb 9
Axios affected by Denial of Service via __proto__ Key in mergeConfig
Affected: All versions, or not specified
CVE-2026-25223
7.5
1%
Feb 3
Fastify's Content-Type header tab character allows body validation bypass
Affected: All versions, or not specified
CVE-2024-10963
7.4
1%
Nov 7
Pam: improper hostname interpretation in pam_access leads to access control bypass
Affected: All versions, or not specified
Showing 8