LC
Product
Lightspeed Core
14
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 10Medium 2Low 0
Watch
Add Lightspeed Core to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-40217 | 8.8 | Apr 10 | LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI Affected: All versions, or not specified |
| CVE-2026-35029 | 8.8 | Apr 6 | LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint Affected: All versions, or not specified |
| CVE-2026-33236 | 8.1 | Mar 20 | NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite Affected: All versions, or not specified |
| CVE-2026-40192 | 7.5 | Apr 15 | Pillow is vulnerable to a FITS GZIP decompression bomb Affected: All versions, or not specified |
| CVE-2026-33231 | 7.5 | Mar 20 | NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app Affected: All versions, or not specified |
| CVE-2026-28356 | 7.5 | Mar 12 | ReDoS in multipart 1.3.0 - `parse_options_header()` Affected: All versions, or not specified |
| CVE-2026-0846 | 7.5 | Mar 9 | Arbitrary File Read via Absolute Path Input in nltk.util.filestring() Affected: All versions, or not specified |
| CVE-2026-0847 | 7.5 | Mar 4 | Path Traversal in nltk/nltk Affected: All versions, or not specified |
| CVE-2026-24486 | 7.5 | Jan 27 | Python-Multipart has Arbitrary File Write via Non-Default Configuration Affected: All versions, or not specified |
| CVE-2026-23490 | 7.5 | Jan 16 | pyasn1 has a DoS vulnerability in decoder Affected: All versions, or not specified |
Showing 10
