Red Hat Security Advisory

RHSA-2025:22759

RHOAI 2.22.3 - Red Hat OpenShift AI

Released 2025-12-04 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat OpenShift AI 2.22 registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9 +8

TI-2025-38917 CVE-2025-62727 · GHSA-7f5h-v6xp-fcq8

HIGH 72

Starlette is a lightweight ASGI framework/toolkit.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.008 Published 2025-10-28 Partial fix · 0.49.1 CWE-407

TI-2025-36412 CVE-2025-58754 · GHSA-4hjh-wcwx-xvwj

HIGH 72

Axios is a promise based HTTP client for the browser and Node.js.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01196 Published 2025-09-12 Partial fix · 1.12.0, 0.30.2 CWE-770

TI-2025-38478 CVE-2025-62156 · GHSA-p84v-gxvw-73pf

HIGH 71

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00605 Published 2025-10-14 Partial fix · 3.6.12, 3.7.3 CWE-22

TI-2025-11058 CVE-2025-12060 · GHSA-hjqc-jx6g-rwp9

MEDIUM 41

The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack.

CVSS 4.0HIGH 8.9 Network Low privileges User interaction EPSS 0.00631 Published 2025-10-30 Fixed in 3.12.0 CWE-22

TI-2025-09090 CVE-2025-9905 · GHSA-36rr-ww3j-vrjv

LOW 33

The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.

CVSS 4.0HIGH 7.3 Local Low privileges User interaction EPSS 0.00221 Published 2025-09-19 Partial fix · 3.11.3 CWE-913

TI-2025-30311 CVE-2025-47907 · GHSA-j5pm-7495-qmr3

LOW 31

Cancelling a query (e.g.

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00406 Published 2025-08-07 Partial fix · 1.23.12, 1.24.6 CWE-362

TI-2025-35990 CVE-2025-58183 · GHSA-9gcr-gp5f-jw27

LOW 20

tar.Reader does not set a maximum size on the number of sparse region data blocks in GNU tar pax 1.0 sparse files.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00443 Published 2025-10-29 Partial fix · 1.24.8, 1.25.2

TI-2025-33569 CVE-2025-53643 · GHSA-9548-qrrj-x5pj

LOW 10

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.

CVSS 4.0LOW 1.7 Network No auth No interaction EPSS 0.00355 Published 2025-07-14 Partial fix · 3.12.14 CWE-444