Skip to content
VulniPulse
Highest advisory severityMedium 1 vendor · 1 advisory

CVE-2026-33245

CVE-2026-33245: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.

Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.

Vendor advisory comparison

Red Hat

1 advisory
  • Advisory severityMedium4.2

    Medium [CVE-2026-33245] Cross-Site Scripting vulnerability via untrusted React Server Component redirects

    CVE-2026-33245Source published

    Cross-Site Scripting vulnerability via untrusted React Server Component redirects. Red Hat rates this moderate (CVSS 4.2). Weakness: CWE-79. Affected package(s): rhoai/odh-mod-arch-automl-rhel9:1782722421, rhoai/odh-mod-arch-mlflow-rhel9:1782132932, rhoai/odh-mod-arch-autorag-rhel9:1782722485, rhoai/odh-mod-arch-maas-rhel9:1782722695, rhoai/odh-mod-arch-model-registry-rhel9:1782722726, rhoai/odh-mod-arch-eval-hub-rhel9:1782722438. Resolved in Red Hat advisory RHSA-2026:34456 — update the affected packages (`sudo dnf update`).

    Related products — impact not confirmed
    • rhoai/odh-mod-arch-automl-rhel9:1782722421
    • rhoai/odh-mod-arch-mlflow-rhel9:1782132932
    • rhoai/odh-mod-arch-autorag-rhel9:1782722485
    • rhoai/odh-mod-arch-maas-rhel9:1782722695

    3 more entries in the full advisory.

    Source-reported affected versions
    • rhoai/odh-mod-arch-automl-rhel9:1782722421
    • rhoai/odh-mod-arch-mlflow-rhel9:1782132932
    • rhoai/odh-mod-arch-autorag-rhel9:1782722485
    • rhoai/odh-mod-arch-maas-rhel9:1782722695

    3 more entries in the full advisory.

    Source-reported fixed versions
    • RHSA-2026:34456
    Mitigation guidance
    • Update the affected package(s) to the fixed version shipped in RHSA-2026:34456 (`sudo dnf update` / `yum update`).

Android app · Google Play

Monitor future Red Hat CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery