Lightspeed Core/redhat-user-workloads/lightspeed-stack
Red Hat · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs | cryptographyLightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 | PyPIRed Hat | Medium | Fix reported | |
| LiteLLM has a sandbox escape in custom-code guardrail | litellmLightspeed Core/redhat-user-workloads/lightspeed-stack | PyPIRed Hat | High | Fix reported | |
| LiteLLM: Authentication bypass via OIDC userinfo cache key collision | litellmLightspeed Core/redhat-user-workloads/lightspeed-stack | PyPIRed Hat | Critical | Fix reported | |
| LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint | litellmLightspeed Core/redhat-user-workloads/lightspeed-stack | PyPIRed Hat | High | Fix reported | |
| HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class | transformersLightspeed Core/openshift-lightspeed-tech-preview/lightspeed-rag-tool-rhel9 | PyPIRed Hat | Medium | Fix reported |