Openshift lightspeed
This hub aggregates every CVE we track for Openshift lightspeed, a product in the cloud saas space. Use it to gauge the current risk picture and drill into individual advisories.
4
CVEs tracked
0
Critical
2
High
1
In CISA KEV
Severity distribution
HIGH2MEDIUM2
Monthly trend
0
0
0
0
1
1
0
0
0
0
0
0
0
0
0
0
0
0
0
1
1
0
0
0
2024-102026-09
Latest CVEs
The 4 most recently published vulnerabilities affecting Openshift lightspeed.
- CVE-2026-46625JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection7.5
- CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksKEV6.5
- CVE-2025-2586Ols: unauthenticated metrics flooding in openshift lightspeed service leading to resource exhaustion7.5
- CVE-2024-11831Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript5.4
Product normalization is registry-driven with AI assist and human review. How it works