Vulnerabilities of Red Hat OpenShift Lightspeed

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 High	Mar 12, 2026
CVE-2026-32274	Black is the uncompromising Python code formatter	8.7 High	Mar 12, 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 High	Mar 12, 2026
CVE-2026-0846	A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file…	8.6 High	Mar 9, 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 High	Mar 6, 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 High	Mar 6, 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 High	Mar 6, 2026
CVE-2026-0847	A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple…	8.6 High	Mar 4, 2026
CVE-2026-27896	The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions…	7.0 High	Feb 26, 2026
CVE-2025-14009	A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions	10.0 Critical	Feb 18, 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 High	Feb 11, 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 High	Feb 10, 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 High	Jan 28, 2026
CVE-2026-24486	Python-Multipart is a streaming multipart parser for Python	8.6 High	Jan 27, 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 High	Jan 23, 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 High	Jan 22, 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Medium	Jan 21, 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 High	Jan 20, 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 High	Jan 16, 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 High	Jan 16, 2026
CVE-2026-22029	React Router is a router for React	8.0 High	Jan 10, 2026
CVE-2025-61686	React Router is a router for React	9.1 Critical	Jan 10, 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 High	Jan 7, 2026
CVE-2025-69223	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	7.5 High	Jan 5, 2026
CVE-2025-2586	A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding	7.5 High	Mar 31, 2025

Other Red Hat products