agentprime: red-hat-openshift-ai-3-3Every new CVE for red-hat-openshift-ai-3-3.https://agentprime.io/CVE-2026-18620: Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputyhttps://agentprime.io/advisories/CVE-2026-18620/https://agentprime.io/advisories/CVE-2026-18620/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:43 GMTCVECVE-2026-18618: Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listenerhttps://agentprime.io/advisories/CVE-2026-18618/https://agentprime.io/advisories/CVE-2026-18618/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:38 GMTCVECVE-2026-18611: Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentialshttps://agentprime.io/advisories/CVE-2026-18611/https://agentprime.io/advisories/CVE-2026-18611/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:35 GMTCVECVE-2026-18982: Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroleshttps://agentprime.io/advisories/CVE-2026-18982/https://agentprime.io/advisories/CVE-2026-18982/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:19 GMTCVECVE-2026-18951: Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrolehttps://agentprime.io/advisories/CVE-2026-18951/https://agentprime.io/advisories/CVE-2026-18951/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:10 GMTCVECVE-2026-18950: Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creationhttps://agentprime.io/advisories/CVE-2026-18950/https://agentprime.io/advisories/CVE-2026-18950/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:05 GMTCVECVE-2026-18949: Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resourceshttps://agentprime.io/advisories/CVE-2026-18949/https://agentprime.io/advisories/CVE-2026-18949/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:00 GMTCVECVE-2026-18947: Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materializationhttps://agentprime.io/advisories/CVE-2026-18947/https://agentprime.io/advisories/CVE-2026-18947/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:51 GMTCVECVE-2026-18941: Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authenticationhttps://agentprime.io/advisories/CVE-2026-18941/https://agentprime.io/advisories/CVE-2026-18941/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:42 GMTCVECVE-2026-18621: Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardeninghttps://agentprime.io/advisories/CVE-2026-18621/https://agentprime.io/advisories/CVE-2026-18621/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:37 GMTCVECVE-2026-18617: Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator podhttps://agentprime.io/advisories/CVE-2026-18617/https://agentprime.io/advisories/CVE-2026-18617/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:33 GMTCVECVE-2026-18608: Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-widehttps://agentprime.io/advisories/CVE-2026-18608/https://agentprime.io/advisories/CVE-2026-18608/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:28 GMTCVECVE-2026-16456: Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputyhttps://agentprime.io/advisories/CVE-2026-16456/https://agentprime.io/advisories/CVE-2026-16456/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:25 GMTCVECVE-2026-15581: Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-widehttps://agentprime.io/advisories/CVE-2026-15581/https://agentprime.io/advisories/CVE-2026-15581/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:18 GMTCVECVE-2026-15467: Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy overridehttps://agentprime.io/advisories/CVE-2026-15467/https://agentprime.io/advisories/CVE-2026-15467/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:12 GMTCVECVE-2026-16745: Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validationhttps://agentprime.io/advisories/CVE-2026-16745/https://agentprime.io/advisories/CVE-2026-16745/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 10:41:30 GMTCVECVE-2026-16118: Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.chttps://agentprime.io/advisories/CVE-2026-16118/https://agentprime.io/advisories/CVE-2026-16118/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 19:44:40 GMTCVECVE-2026-15378: Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)https://agentprime.io/advisories/CVE-2026-15378/https://agentprime.io/advisories/CVE-2026-15378/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 09:29:55 GMTCVEcriticalCVE-2026-15154: Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexhttps://agentprime.io/advisories/CVE-2026-15154/https://agentprime.io/advisories/CVE-2026-15154/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:50:51 GMTCVECVE-2026-55655: Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionshttps://agentprime.io/advisories/CVE-2026-55655/https://agentprime.io/advisories/CVE-2026-55655/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:25 GMTCVECVE-2026-55653: Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of servicehttps://agentprime.io/advisories/CVE-2026-55653/https://agentprime.io/advisories/CVE-2026-55653/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:22 GMTCVECVE-2026-56211: Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frameshttps://agentprime.io/advisories/CVE-2026-56211/https://agentprime.io/advisories/CVE-2026-56211/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:33 GMTCVECVE-2026-56210: Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idhttps://agentprime.io/advisories/CVE-2026-56210/https://agentprime.io/advisories/CVE-2026-56210/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:33 GMTCVECVE-2026-56209: Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackhttps://agentprime.io/advisories/CVE-2026-56209/https://agentprime.io/advisories/CVE-2026-56209/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:26 GMTCVECVE-2026-5483: Odh-dashboard: odh dashboard kubernetes service account exposurehttps://agentprime.io/advisories/CVE-2026-5483/https://agentprime.io/advisories/CVE-2026-5483/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 17:33:25 GMTCVE