https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 22 Oct 2026 00:15:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-365186 EUVD-2026-365186 https://cve.radiocsirt.org/vuln/euvd-2026-365186 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86332 <p>A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).</p> <p>A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-86332 https://cve.radiocsirt.org/vuln/ghsa-pqcc-gp67-33w6 <p>A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).</p> <p>A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).</p> https://cve.radiocsirt.org/vuln/ghsa-pqcc-gp67-33w6 https://cve.radiocsirt.org/vuln/rhsa-2026:86891 <p>python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives timm: Hugging Face PyTorch Image Models: Remote Code Execution via Deserialization of Untrusted Data buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability @fastify/static: @fastify/static: Information disclosure via route guard bypass undici: undici: Denial of Service via unrequested WebSocket subprotocol vllm: vLLM: Denial of Service via memory exhaustion from oversized media files lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing sqlparse: sqlparse: Denial of Service via inefficient SQL parsing io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration nltk: NLTK: Information Disclosure via Symlink Sandbox Bypass github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing anyio: AnyIO: TLS certificate spoofing via imprope…</p> <p>python-tornado: Tornado before 6.4.1 HTTP Request Smuggling via Transfer-Encoding undici: undici: Information disclosure and Denial of Service via malformed Cache-Control directives timm: Hugging Face PyTorch Image Models: Remote Code Execution via Deserialization of Untrusted Data buildkit: github.com/moby/buildkit: BuildKit: File escape vulnerability @fastify/static: @fastify/static: Information disclosure via route guard bypass undici: undici: Denial of Service via unrequested WebSocket subprotocol vllm: vLLM: Denial of Service via memory exhaustion from oversized media files lxml: lxml-html-clean: lxml: URL bypass vulnerability in Cleaner via missing xlink:href tornado: Tornado: Denial of Service via uncontrolled gzip decompression memory consumption sqlparse: sqlparse: Denial of Service via quadratic CPU consumption in SQL parsing encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue io.micrometer/micrometer-registry-statsd: io.micrometer/micrometer-core: Micrometer: Line-protocol and log injection via unsanitized input allows metric and log spoofing sqlparse: sqlparse: Denial of Service via inefficient SQL parsing io.netty/netty-handler: Netty: TLS hostname verification bypass via OpenSSL client path misconfiguration nltk: NLTK: Information Disclosure via Symlink Sandbox Bypass github.com/klauspost/compress: klauspost/compress: Denial of Service via integer overflow in dictionary processing anyio: AnyIO: TLS certificate spoofing via imprope…</p> https://cve.radiocsirt.org/vuln/rhsa-2026:86891