Vulnérabilités de Red Hat OpenShift Lightspeed

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-1526	The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…	7.5 Élevée	12 mars 2026
CVE-2026-32274	Black is the uncompromising Python code formatter	8.7 Élevée	12 mars 2026
CVE-2026-28356	multipart is a fast multipart/form-data parser for python	7.5 Élevée	12 mars 2026
CVE-2026-0846	A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file…	8.6 Élevée	9 mars 2026
CVE-2026-25679	url.Parse insufficiently validated the host/authority component and accepted some invalid URLs	7.5 Élevée	6 mars 2026
CVE-2026-27137	When verifying a certificate chain which contains a certificate containing multiple email address constraints which…	7.5 Élevée	6 mars 2026
CVE-2026-29063	Immutable.js provides many Persistent Immutable data structures	8.7 Élevée	6 mars 2026
CVE-2026-0847	A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple…	8.6 Élevée	4 mars 2026
CVE-2026-27896	The Go MCP SDK used Go's standard encoding/json.Unmarshal for JSON-RPC and MCP protocol message parsing in versions…	7.0 Élevée	26 févr. 2026
CVE-2025-14009	A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions	10.0 Critique	18 févr. 2026
CVE-2026-25990	Pillow is a Python imaging library	8.6 Élevée	11 févr. 2026
CVE-2026-26007	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers	8.2 Élevée	10 févr. 2026
CVE-2025-61726	The net/url package does not set a limit on the number of query parameters in a query	7.5 Élevée	28 janv. 2026
CVE-2026-24486	Python-Multipart is a streaming multipart parser for Python	8.6 Élevée	27 janv. 2026
CVE-2026-0775	npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability	7.0 Élevée	23 janv. 2026
CVE-2026-24049	wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427	7.1 Élevée	22 janv. 2026
CVE-2025-13465	The _.unset and _.omit functions in Lodash are vulnerable to prototype pollution	6.9 Moyenne	21 janv. 2026
CVE-2026-23950	node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3	8.8 Élevée	20 janv. 2026
CVE-2026-23745	node-tar is a Tar for Node.js	8.2 Élevée	16 janv. 2026
CVE-2026-23490	pyasn1 is a generic ASN.1 library for Python	7.5 Élevée	16 janv. 2026
CVE-2026-22029	React Router is a router for React	8.0 Élevée	10 janv. 2026
CVE-2025-61686	React Router is a router for React	9.1 Critique	10 janv. 2026
CVE-2026-21441	urllib3 is an HTTP client library for Python	8.9 Élevée	7 janv. 2026
CVE-2025-69223	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	7.5 Élevée	5 janv. 2026
CVE-2025-2586	A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding	7.5 Élevée	31 mars 2025

Autres produits Red Hat