openshift lightspeed kayıtları
openshift lightspeed üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %87,5
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
- CWE-427 Uncontrolled Search Path Element1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
36İzleyin | CVE-2026-9277Kavram kanıtı | shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CWE-77 | Kritik9,2 | — | %1,0 | 22 May 2026 |
30İzleyin | CVE-2026-28356İstismar yok | ReDoS in multipart 1.3.0 - `parse_options_header()`defnull · multipart · CWE-1333 | Yüksek7,5 | — | %1,0 | 12 Mar 2026 |
30İzleyin | CVE-2026-42561İstismar yok | Python-Multipart: Denial of Service via unbounded multipart part headerskludex · python-multipart · CWE-770 | Yüksek7,5 | — | %0,8 | 13 May 2026 |
30İzleyin | CVE-2026-44209İstismar yok | Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTImasci · banks · CWE-1336 | Yüksek7,5 | — | %0,7 | 26 May 2026 |
30İzleyin | CVE-2024-52011Kavram kanıtı | launch-editor vulnerable to command injection via the crafted request on Windowsvitejs · launch-editor · CWE-77 | Yüksek7,5 | — | %0,5 | 1 Haz 2026 |
28İzleyin | CVE-2026-0775İstismar yok | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitynpm · cli · CWE-732 | Yüksek7,0 | — | %0,3 | 23 Oca 2026 |
28İzleyin | CVE-2026-41567Kavram kanıtı | Docker: `PUT /containers/{id}/archive` executes container binary on the hostmoby · moby/v2/daemon · CWE-427 | Yüksek7,2 | — | %0,2 | 4 Haz 2026 |
21İzleyin | CVE-2026-45292İstismar yok | opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagationopen-telemetry · opentelemetry-java · CWE-770 | Orta5,3 | — | %0,8 | 28 May 2026 |
- CVE-2026-927736İzleyin
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
KritikCVSS 9,2Kavram kanıtıEPSS %122 May 2026
- CVE-2026-2835630İzleyin
ReDoS in multipart 1.3.0 - `parse_options_header()`
YüksekCVSS 7,5İstismar yokEPSS %1defnull · multipart12 Mar 2026
- CVE-2026-4256130İzleyin
Python-Multipart: Denial of Service via unbounded multipart part headers
YüksekCVSS 7,5İstismar yokEPSS %1kludex · python-multipart13 May 2026
- CVE-2026-4420930İzleyin
Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI
YüksekCVSS 7,5İstismar yokEPSS %1masci · banks26 May 2026
- CVE-2024-5201130İzleyin
launch-editor vulnerable to command injection via the crafted request on Windows
YüksekCVSS 7,5Kavram kanıtıEPSS %1vitejs · launch-editor1 Haz 2026
- CVE-2026-077528İzleyin
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
YüksekCVSS 7,0İstismar yokEPSS %0npm · cli23 Oca 2026
- CVE-2026-4156728İzleyin
Docker: `PUT /containers/{id}/archive` executes container binary on the host
YüksekCVSS 7,2Kavram kanıtıEPSS %0moby · moby/v2/daemon4 Haz 2026
- CVE-2026-4529221İzleyin
opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
OrtaCVSS 5,3İstismar yokEPSS %1open-telemetry · opentelemetry-java28 May 2026