TI-2026-24678 CVE-2026-32141 · GHSA-25h7-pfq9-p65f
flatted: Unbounded recursion DoS in parse() revive phase
Priority HIGH 72
flatted is a circular JSON parser.
RHSA-2026:5807
RHOAI 2.16.4 - Red Hat OpenShift AI
Released 2026-03-25 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-codeflare-operator-rhel8, registry.redhat.io/rhoai/odh-dashboard-rhel8, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel8 +12
Fixes 19 records
TI-2025-42946 CVE-2025-69873 · GHSA-2g4f-4pwh-qvx6
Regular expression denial of service in ajv.js ajv
Priority HIGH 72
ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled.
TI-2025-41020 CVE-2025-66626 · GHSA-xrqc-7xgx-c9vh
argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links
Priority HIGH 70
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.
TI-2025-11591 CVE-2025-12638
Path Traversal Vulnerability in keras-team/keras via Tar Archive Extraction in keras.utils.get_file()
Priority HIGH 70
Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives.
TI-2025-40854 CVE-2025-66418 · GHSA-gm62-xv2j-4w53
urllib3 allows an unbounded number of links in the decompression chain
Priority MEDIUM 46
urllib3 is a user-friendly HTTP client library for Python.
TI-2026-20739 CVE-2026-25639 · GHSA-43fc-jf86-j433
Axios affected by Denial of Service via __proto__ Key in mergeConfig
Priority MEDIUM 44
Axios is a promise based HTTP client for the browser and Node.js.
TI-2025-40557 CVE-2025-66031 · GHSA-554w-wpv2-vw27
node-forge ASN.1 Unbounded Recursion
Priority MEDIUM 44
Forge (also called `node-forge`) is a native implementation of Transport Layer Security in JavaScript.
TI-2025-11739 CVE-2025-12816 · GHSA-5gfm-wpxj-wjgq
An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and…
Priority MEDIUM 44
An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence…
TI-2025-38128 CVE-2025-61726 · GHSA-gm9r-q53w-2gh4
Memory exhaustion in query parameter parsing in net/url
Priority MEDIUM 43
The net/url package does not set a limit on the number of query parameters in a query.
TI-2026-01876 CVE-2026-2229 · GHSA-v9p9-hfj2-hcw8
undici is vulnerable to Unhandled Exception in undici WebSocket Client Due to Invalid server_max_window_bits Validation
Priority MEDIUM 41
ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of the server_max_window_bits parameter in the permessage-deflate extension.
TI-2026-01216 CVE-2026-1526 · GHSA-vrm6-8vpv-qv8q
undici is vulnerable to Unbounded Memory Consumption in undici WebSocket permessage-deflate Decompression
Priority MEDIUM 41
The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during permessage-deflate decompression.
TI-2025-11058 CVE-2025-12060 · GHSA-hjqc-jx6g-rwp9
Keras keras.utils.get_file Utility Path Traversal Vulnerability
Priority MEDIUM 41
The keras.utils.get_file API in Keras, when used with the extract=True option for tar archives, is vulnerable to a path traversal attack.
TI-2026-23219 CVE-2026-29074 · GHSA-xpqw-6gx7-v673
SVGO: DoS through entity expansion in DOCTYPE (Billion Laughs)
Priority MEDIUM 40
SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.
TI-2026-01218 CVE-2026-1528 · GHSA-f269-vfmq-vjvj
undici is vulnerable to Malicious WebSocket 64-bit length overflows undici parser and crashes the client
Priority MEDIUM 40
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length.
TI-2025-41736 CVE-2025-68156 · GHSA-cfpf-hrx2-8rv6
Expr has Denial of Service via Unbounded Recursion in Builtin Functions
Priority LOW 39
Expr is an expression language and expression evaluation for Go.
TI-2024-16849 CVE-2024-25621 · GHSA-pwhc-rpq9-4c8w
containerd affected by a local privilege escalation via wide permissions on CRI directory
Priority LOW 35
containerd is an open-source container runtime.
TI-2026-20373 CVE-2026-25223 · GHSA-jx2c-rxcm-jvmq
Fastify's Content-Type header tab character allows body validation bypass
Priority LOW 34
Fastify is a fast and low overhead web framework, for Node.js.
TI-2025-38131 CVE-2025-61729 · GHSA-7c64-f9jr-v9h2
Excessive resource consumption when printing error string for host certificate validation in crypto/x509
Priority LOW 33
Within HostnameError.Error(), when constructing an error string, there is no limit to the number of hosts that will be printed out.
TI-2025-05602 CVE-2025-6193 · GHSA-wppx-2c2r-43hc
Trustyai-explainability: command injection via lmevaljob cr
Priority LOW 28
A command injection vulnerability was discovered in the TrustyAI Explainability toolkit.