Skip to content

Known vulnerabilities in Red Hat Lightspeed Core

Is your version affected?

CVE Summary Score Published
CVE-2026-34993 AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python 6.4 Medium Jun 2, 2026
CVE-2026-8643 pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved… 4.1 Medium Jun 1, 2026
CVE-2026-42208 Exploited BerriAI LiteLLM SQL Injection Vulnerability 9.3 Critical May 8, 2026
CVE-2026-40192 Pillow is a Python imaging library 8.7 High Apr 15, 2026
CVE-2026-6385 A flaw was found in FFmpeg 6.5 Medium Apr 15, 2026
CVE-2026-40217 LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the… 8.8 High Apr 10, 2026
CVE-2026-39892 cryptography has a buffer overflow if non-contiguous buffers were passed to APIs 6.9 Medium Apr 8, 2026
CVE-2026-35030 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format 9.4 Critical Apr 6, 2026
CVE-2026-35029 LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format 8.7 High Apr 6, 2026
CVE-2026-33236 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research… 8.1 High Mar 20, 2026
CVE-2026-33231 NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research… 7.5 High Mar 20, 2026
CVE-2026-27459 pyOpenSSL is a Python wrapper around the OpenSSL library 7.2 High Mar 17, 2026
CVE-2026-28498 Authlib is a Python library which builds OAuth and OpenID Connect servers 8.2 High Mar 16, 2026
CVE-2026-27962 Authlib is a Python library which builds OAuth and OpenID Connect servers 9.1 Critical Mar 16, 2026
CVE-2026-28356 multipart is a fast multipart/form-data parser for python 7.5 High Mar 12, 2026
CVE-2026-0846 A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file… 8.6 High Mar 9, 2026
CVE-2026-0847 A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple… 8.6 High Mar 4, 2026
CVE-2026-24486 Python-Multipart is a streaming multipart parser for Python 8.6 High Jan 27, 2026
CVE-2026-23490 pyasn1 is a generic ASN.1 library for Python 7.5 High Jan 16, 2026

Other Red Hat products