Pdrive Lightspeed (Redhat) - vulnerabilities (CVEs)

7 CVEs, 1 in the last 30 days, 2 known versions, newest CVE from 2026-09-28. Vendor: Redhat.

CVEs of Pdrive Lightspeed

• CVE-2026-87114 - CVSS 7.1 (high), 2026-09-28: A flaw was found in kube-compare. When processing a 'container://' reference path, the tool incorrectly executes an untrusted container image's entrypoint…
• CVE-2026-92925 - CVSS 7.1 (high), 2026-09-17: A flaw was found in Redis community. The cluster bus packet parser, responsible for handling PING, PONG, and MEET packets, fails to properly validate…
• CVE-2026-19391 - CVSS 6.5 (medium), 2026-08-11: A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'. This allows…
• CVE-2026-15584 - CVSS 7.5 (high), 2026-07-13: A privilege escalation vulnerability was found in the incluster-checks tool for OpenShift. The tool creates privileged debug pods with host filesystem access…
• CVE-2026-13083 - CVSS 6.9 (medium), 2026-06-25: A flaw was found in the Pen Drive report generator. Cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. An attacker…
• CVE-2026-8643 - CVSS 8 (high), 2026-06-01: pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory,…
• CVE-2026-44432 - CVSS 8.9 (high), 2026-05-13: urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1)…