All products

OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9

Red Hat · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
h11 accepts some malformed Chunked-Encoding bodiesCVE-2025-43859 · GHSA-VQFR-H8MV-GHFJVersion ranges need review. h11OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Critical Fix reported
Jinja has a sandbox breakout through malicious filenamesCVE-2024-56201 · GHSA-GMJ6-6F8F-6699Version ranges need review. jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
Jinja has a sandbox breakout through indirect reference to format methodCVE-2024-56326 · GHSA-Q2X7-8RV6-6Q7HVersion ranges need review. jinja2OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
aiohttp allows request smuggling due to incorrect parsing of chunk extensionsCVE-2024-52304 · GHSA-8495-4G3G-X7PRVersion ranges need review. aiohttpOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
containerd has an integer overflow in User ID handlingCVE-2024-40635 · GHSA-265R-HFXG-FHMGVersion ranges need review. github.com/containerd/containerd/v2github.com/containerd/containerd GoRed Hat Medium Fix reported
LLama-Index CLI OS command injection vulnerabilityCVE-2025-1753 · GHSA-G99H-56MW-8263Version ranges need review. llama-index-clillama-index PyPIRed Hat High Fix reported
LlamaIndex Improper Handling of Exceptional Conditions vulnerabilityCVE-2024-12704 · GHSA-J3WR-M6XH-64HGVersion ranges need review. llama-index-corellama-index PyPIRed Hat High Fix reported
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure PermissionsCVE-2024-12911 · GHSA-JMGM-GX32-VP4WVersion ranges need review. llama-indexOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat High Fix reported
virtualenv allows command injection through activation scripts for a virtual environmentCVE-2024-53899 · GHSA-RQC4-2HC7-8C8VVersion ranges need review. virtualenvOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat High Fix reported
PyTorch susceptible to local Denial of ServiceCVE-2025-2953 · GHSA-3749-GHW9-M3MGVersion ranges need review. torchOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Low Fix reported
LlamaIndex Uncontrolled Resource Consumption vulnerabilityCVE-2024-12910 · GHSA-JVPF-XF32-2W4QVersion ranges need review. llama-indexOpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 PyPIRed Hat Medium Fix reported
setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File WriteCVE-2025-47273 · GHSA-5RJG-FVGR-3XXFVersion ranges need review. setuptoolsConfidential Compute Attestation/confidential-compute-attestation-tech-preview/trustee-rhel9 PyPIRed Hat High Fix reported
redis: Redis' Lua library commands may lead to remote code executionCVE-2024-46981 OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9Red Hat Enterprise Linux AI (RHEL AI)/rhelai1/bootc-amd-rhel9 Red Hat High No fix reported
redis: Redis DoS Vulnerability due to unlimited growth of output buffers abused by unauthenticated clientCVE-2025-21605 OpenShift Lightspeed/openshift-lightspeed-tech-preview/lightspeed-service-api-rhel9 Red Hat High No fix reported