openshift lightspeed records
8 published records for vendor openshift lightspeed.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 87.5%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-770 Allocation of Resources Without Limits or Throttling2
- CWE-1333 Inefficient Regular Expression Complexity1
- CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine1
- CWE-427 Uncontrolled Search Path Element1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2026-9277Proof of concept | shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`CWE-77 | Critical9.2 | — | 0.8% | May 22, 2026 |
30Monitor | CVE-2026-28356No exploit | ReDoS in multipart 1.3.0 - `parse_options_header()`defnull · multipart · CWE-1333 | High7.5 | — | 1.0% | Mar 12, 2026 |
30Monitor | CVE-2026-42561No exploit | Python-Multipart: Denial of Service via unbounded multipart part headerskludex · python-multipart · CWE-770 | High7.5 | — | 0.8% | May 13, 2026 |
30Monitor | CVE-2026-44209No exploit | Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTImasci · banks · CWE-1336 | High7.5 | — | 0.7% | May 26, 2026 |
30Monitor | CVE-2024-52011Proof of concept | launch-editor vulnerable to command injection via the crafted request on Windowsvitejs · launch-editor · CWE-77 | High7.5 | — | 0.5% | Jun 1, 2026 |
28Monitor | CVE-2026-0775No exploit | npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitynpm · cli · CWE-732 | High7.0 | — | 0.3% | Jan 23, 2026 |
28Monitor | CVE-2026-41567Proof of concept | Docker: `PUT /containers/{id}/archive` executes container binary on the hostmoby · moby/v2/daemon · CWE-427 | High7.2 | — | 0.2% | Jun 4, 2026 |
21Monitor | CVE-2026-45292No exploit | opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagationopen-telemetry · opentelemetry-java · CWE-770 | Medium5.3 | — | 0.8% | May 28, 2026 |
- CVE-2026-927736Monitor
shell-quote `quote()` does not validate object-token shapes, allowing command injection via line terminators in `.op`
CriticalCVSS 9.2Proof of conceptEPSS 1%May 22, 2026
- CVE-2026-2835630Monitor
ReDoS in multipart 1.3.0 - `parse_options_header()`
HighCVSS 7.5No exploitEPSS 1%defnull · multipartMar 12, 2026
- CVE-2026-4256130Monitor
Python-Multipart: Denial of Service via unbounded multipart part headers
HighCVSS 7.5No exploitEPSS 1%kludex · python-multipartMay 13, 2026
- CVE-2026-4420930Monitor
Banks: Critical Remote Code Execution (RCE) via Jinja2 SSTI
HighCVSS 7.5No exploitEPSS 1%masci · banksMay 26, 2026
- CVE-2024-5201130Monitor
launch-editor vulnerable to command injection via the crafted request on Windows
HighCVSS 7.5Proof of conceptEPSS 1%vitejs · launch-editorJun 1, 2026
- CVE-2026-077528Monitor
npm cli Incorrect Permission Assignment Local Privilege Escalation Vulnerability
HighCVSS 7.0No exploitEPSS 0%npm · cliJan 23, 2026
- CVE-2026-4156728Monitor
Docker: `PUT /containers/{id}/archive` executes container binary on the host
HighCVSS 7.2Proof of conceptEPSS 0%moby · moby/v2/daemonJun 4, 2026
- CVE-2026-4529221Monitor
opentelemetry-java: Unbounded Memory Allocation in W3C Baggage Propagation
MediumCVSS 5.3No exploitEPSS 1%open-telemetry · opentelemetry-javaMay 28, 2026