Lightspeed Core (Redhat) - vulnerabilities (CVEs)
19 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-06-02. Vendor: Redhat.
CVEs of Lightspeed Core
- CVE-2026-34993 - CVSS 7.3 (high), 2026-06-02: AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may…
- CVE-2026-8643 - CVSS 8 (high), 2026-06-01: pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory,…
- CVE-2026-42208 - CVSS 9.8 (critical), 2026-05-08: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used…
- CVE-2026-40192 - CVSS 8.7 (high), 2026-04-15: Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making…
- CVE-2026-6385 - CVSS 6.5 (medium), 2026-04-15: A flaw was found in FFmpeg. A remote attacker could exploit this vulnerability by providing a specially crafted MPEG-PS/VOB media file containing a malicious…
- CVE-2026-40217 - CVSS 8.8 (high), 2026-04-10: LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI.
- CVE-2026-39892 - CVSS 9.8 (critical), 2026-04-08: cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous…
- CVE-2026-35030 - CVSS 9.4 (critical), 2026-04-06: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth:…
- CVE-2026-35029 - CVSS 8.8 (high), 2026-04-06: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role…
- CVE-2026-33236 - CVSS 8.1 (high), 2026-03-20: NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language…
- CVE-2026-33231 - CVSS 7.5 (high), 2026-03-20: NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language…
- CVE-2026-27459 - CVSS 9.8 (critical), 2026-03-18: pyOpenSSL is a Python wrapper around the OpenSSL library. Starting in version 22.0.0 and prior to version 26.0.0, if a user provided callback to…
- CVE-2026-28498 - CVSS 9.1 (critical), 2026-03-16: Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib…
- CVE-2026-27962 - CVSS 9.1 (critical), 2026-03-16: Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS…
- CVE-2026-28356 - CVSS 7.5 (high), 2026-03-12: multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a…
- CVE-2026-0846 - CVSS 8.6 (high), 2026-03-09: A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input…
- CVE-2026-0847 - CVSS 8.6 (high), 2026-03-04: A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including…
- CVE-2026-24486 - CVSS 8.6 (high), 2026-01-27: Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default…
- CVE-2026-23490 - CVSS 7.5 (high), 2026-01-16: pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed…
