Skip to contentRed Hat Lightspeed Core vulnerabilities
- aio-libs aiohttp, red hat exploit intelligence, lightspeed core +27 more +29 moreAIOHTTP Vulnerable to Deserialization of Untrusted DataCVE-2026-34993Fix available6.4 Medium
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 morepip can extract console_scripts and gui_scripts outside installation directoryCVE-2026-8643Fix available4.1 Medium
- berriai litellm, red hat lightspeed core, ansible automation platform 2 +1 more +3 moreLiteLLM: SQL injection in Proxy API key verificationCVE-2026-42208In KEVPublic exploitFix availableEPSS 89.4%9.3 Critical
- red hat lightspeed core, ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 moreFfmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parserCVE-2026-6385Fix available6.5 Medium
- python pillow, red hat lightspeed core, openshift lightspeed +27 more +29 morePillow is vulnerable to a FITS GZIP decompression bombCVE-2026-40192Fix available8.7 High
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +2 more +4 moreDuplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-40217Public exploitFix availableEPSS 17.0%8.8 High
- cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 morecryptography has a buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892Fix available6.9 Medium
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 moreLiteLLM has an authentication bypass via OIDC userinfo cache key collisionCVE-2026-35030Public exploitFix available9.4 Critical
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 moreLiteLLM affected by privilege escalation via unrestricted proxy configuration endpointCVE-2026-35029Public exploitFix availableEPSS 38.6%8.7 High
- nltk, red hat lightspeed core, openshift lightspeed +4 more +6 moreNLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File OverwriteCVE-2026-33236Fix available8.1 High
- nltk, red hat lightspeed core, openshift lightspeed +4 more +6 moreNLTK has unauthenticated remote shutdown in nltk.app.wordnet_appCVE-2026-33231Fix available7.5 High
- pyca pyopenssl, red hat confidential compute attestation, exploit intelligence +37 more +39 morepyOpenSSL DTLS cookie callback buffer overflowCVE-2026-27459Fix available7.2 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib: Fail-Open Cryptographic Verification in OIDC Hash BindingCVE-2026-28498Fix available8.2 High
- authlib, red hat lightspeed core, ansible automation platform 2 +7 more +9 moreAuthlib JWS JWK Header Injection: Signature Verification BypassCVE-2026-27962Fix available9.1 Critical
- defnull multipart, red hat lightspeed core, openshift lightspeed +8 more +10 moreReDoS in multipart 1.3.0 - `parse_options_header()`CVE-2026-28356Fix available7.5 High
- nltk, nltk nltk/nltk, red hat lightspeed core +5 more +7 moreArbitrary File Read via Absolute Path Input in nltk.util.filestring()CVE-2026-0846Fix available8.6 High
- nltk, nltk nltk/nltk, red hat lightspeed core +5 more +7 morePath Traversal in nltk/nltkCVE-2026-0847Public exploitFix available8.6 High
- fastapiexpert python-multipart, red hat lightspeed core, openshift lightspeed +11 more +13 morePython-Multipart has Arbitrary File Write via Non-Default ConfigurationCVE-2026-24486Public exploitFix available8.6 High
- pyasn1, debian linux, red hat lightspeed core +48 more +50 morepyasn1 has a DoS vulnerability in decoderCVE-2026-23490Fix available7.5 High