Read the docs
Red Hat Security Advisory

RHSA-2026:69539

RHOAI 3.5.1 - Red Hat OpenShift AI

Released 2026-09-21 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 15 records

TI-2026-56370 CVE-2026-81722 · GHSA-ww6m-cw3f-q94g

nltk PorterStemmer before 3.10.3 Quadratic-time DoS

Priority HIGH 77

nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem().

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00521 Published 2026-08-27 Partial fix · 3.10.3 CWE-407
TI-2026-55172 CVE-2026-79674 · GHSA-3gq4-3j92-5w49

NLTK 3.10.2 Path Traversal via corpus-reader constructors

Priority HIGH 77

NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00387 Published 2026-08-25 Partial fix · 3.10.3 CWE-73
TI-2026-44524 CVE-2026-62384 · GHSA-f833-7jw8-xwrv

NLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.2

Priority HIGH 77

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00651 Published 2026-08-22 Partial fix · 3.10.2 CWE-22
TI-2026-56372 CVE-2026-81724 · GHSA-cw6x-m8jw-qmrh

NLTK before 3.10.3 Denial of Service via Uncontrolled Recursion

Priority HIGH 70

NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested feature-structure inpu…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00456 Published 2026-08-27 Partial fix · 3.10.3 CWE-674
TI-2026-53327 CVE-2026-76222 · GHSA-hmq2-w58f-27jc

GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name

Priority HIGH 70

GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory.

CVSS 4.0HIGH 8.4 Network No auth User interaction EPSS 0.00422 Published 2026-08-19 Partial fix · 3.1.58 CWE-22
TI-2026-56375 CVE-2026-81727 · GHSA-f794-5jv7-7672

NLTK before 3.10.3 Hardlink File Overwrite via downloader

Priority MEDIUM 64

NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to overwrite files outside the install root through…

CVSS 4.0MEDIUM 6.9 Local Low privileges No interaction EPSS 0.00187 Published 2026-08-27 Partial fix · 3.10.3 CWE-59
TI-2026-55446 CVE-2026-80205 · GHSA-rrv8-h7p8-rx55

NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex

Priority MEDIUM 45

NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied regular expressions without validation or timeout.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00651 Published 2026-08-26 Partial fix · 3.10.0 CWE-1333
TI-2026-40997 CVE-2026-56859 · GHSA-76p8-fhrm-vpc7

Add recursion depth guard during decode in encoding/xml

Priority MEDIUM 40

Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00568 Published 2026-08-13 Partial fix · 1.25.13, 1.26.6 +1 CWE-770
TI-2026-50128 CVE-2026-71556 · GHSA-hc8v-wwc9-vgxm

go-git: Worktree operations may follow symlinks

Priority LOW 31

go-git is an extensible git implementation library written in pure Go.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00357 Published 2026-08-07 Partial fix · 5.19.2, 6.0.0-alpha.5 CWE-59