TI-2025-38808 CVE-2025-62593 · GHSA-q279-jhrf-cc6v
Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack
Priority CRITICAL 100KEV
Ray is an AI compute engine.
RHSA-2025:23531
RHOAI 2.25.1 - Red Hat OpenShift AI
Released 2025-12-17 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-nlp-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9 +34
Fixes 12 records
TI-2025-31626 CVE-2025-49655 · GHSA-cvhh-q5g5-qprp
Deserialization of untrusted data in keras-team Keras
Priority HIGH 82
Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to r…
TI-2025-38917 CVE-2025-62727 · GHSA-7f5h-v6xp-fcq8
Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse
Priority HIGH 72
Starlette is a lightweight ASGI framework/toolkit.
TI-2025-11591 CVE-2025-12638
Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()
Priority HIGH 70
Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives.
TI-2025-38484 CVE-2025-62164 · GHSA-mrw7-hf4f-83pf
VLLM deserialization vulnerability leading to DoS and potential RCE
Priority MEDIUM 42
vLLM is an inference and serving engine for large language models (LLMs).
TI-2025-11058 CVE-2025-12060 · GHSA-hjqc-jx6g-rwp9
Keras keras.utils.get_file Utility Path Traversal Vulnerability
Priority MEDIUM 41
The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack.
TI-2025-40094 CVE-2025-64756 · GHSA-5j98-mcp5-4vw2
glob CLI: Command injection via -c/--cmd executes matches with shell:true
Priority MEDIUM 40
Glob matches files using patterns the shell uses.
TI-2025-30317 CVE-2025-47913 · GHSA-56w8-48fp-6mgv
Potential denial of service in golang.org/x/crypto/ssh/agent
Priority MEDIUM 40
SSH clients receiving SSH_AGENT_SUCCESS when expecting a typed response will panic and cause early termination of the client process.
TI-2025-09091 CVE-2025-9906 · GHSA-36fq-jgmw-4r9c
Arbitrary Code execution in Keras Safe Mode
Priority LOW 39
The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.
TI-2025-40852 CVE-2025-66416 · GHSA-9h52-p55h-vw2f
DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK for Servers Running on Localhost
Priority LOW 36
The MCP Python SDK, called `mcp` on PyPI, is a Python implementation of the Model Context Protocol (MCP).
TI-2025-09090 CVE-2025-9905 · GHSA-36rr-ww3j-vrjv
Arbitary Code execution in Keras load_model()
Priority LOW 33
The Keras Model.load_model method can be exploited to achieve arbitrary code execution, even with safe_mode=True.
TI-2025-33569 CVE-2025-53643 · GHSA-9548-qrrj-x5pj
AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
Priority LOW 10
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.