agentprime: red-hat-openshift-ai-3-5Every new CVE for red-hat-openshift-ai-3-5.https://agentprime.io/CVE-2026-74860: Libxml2: double-free/uaf in libxml2 python bindingshttps://agentprime.io/advisories/CVE-2026-74860/https://agentprime.io/advisories/CVE-2026-74860/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:27:45 GMTCVECVE-2026-86332: Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated userhttps://agentprime.io/advisories/CVE-2026-86332/https://agentprime.io/advisories/CVE-2026-86332/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 08:39:15 GMTCVECVE-2026-18620: Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputyhttps://agentprime.io/advisories/CVE-2026-18620/https://agentprime.io/advisories/CVE-2026-18620/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:43 GMTCVECVE-2026-18618: Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listenerhttps://agentprime.io/advisories/CVE-2026-18618/https://agentprime.io/advisories/CVE-2026-18618/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:38 GMTCVECVE-2026-18611: Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentialshttps://agentprime.io/advisories/CVE-2026-18611/https://agentprime.io/advisories/CVE-2026-18611/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:35 GMTCVECVE-2026-18982: Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroleshttps://agentprime.io/advisories/CVE-2026-18982/https://agentprime.io/advisories/CVE-2026-18982/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:19 GMTCVECVE-2026-18951: Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrolehttps://agentprime.io/advisories/CVE-2026-18951/https://agentprime.io/advisories/CVE-2026-18951/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:10 GMTCVECVE-2026-18617: Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator podhttps://agentprime.io/advisories/CVE-2026-18617/https://agentprime.io/advisories/CVE-2026-18617/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:33 GMTCVECVE-2026-18608: Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-widehttps://agentprime.io/advisories/CVE-2026-18608/https://agentprime.io/advisories/CVE-2026-18608/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:28 GMTCVECVE-2026-15581: Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-widehttps://agentprime.io/advisories/CVE-2026-15581/https://agentprime.io/advisories/CVE-2026-15581/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:18 GMTCVECVE-2026-15467: Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy overridehttps://agentprime.io/advisories/CVE-2026-15467/https://agentprime.io/advisories/CVE-2026-15467/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:12 GMTCVECVE-2026-16118: Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.chttps://agentprime.io/advisories/CVE-2026-16118/https://agentprime.io/advisories/CVE-2026-16118/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 19:44:40 GMTCVECVE-2026-55655: Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionshttps://agentprime.io/advisories/CVE-2026-55655/https://agentprime.io/advisories/CVE-2026-55655/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:25 GMTCVECVE-2026-55653: Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of servicehttps://agentprime.io/advisories/CVE-2026-55653/https://agentprime.io/advisories/CVE-2026-55653/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:22 GMTCVECVE-2026-56211: Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frameshttps://agentprime.io/advisories/CVE-2026-56211/https://agentprime.io/advisories/CVE-2026-56211/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:33 GMTCVECVE-2026-56210: Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idhttps://agentprime.io/advisories/CVE-2026-56210/https://agentprime.io/advisories/CVE-2026-56210/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:33 GMTCVECVE-2026-56209: Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackhttps://agentprime.io/advisories/CVE-2026-56209/https://agentprime.io/advisories/CVE-2026-56209/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:26 GMTCVE