Red Hat OpenShift Lightspeed

3 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-114236Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layersLOW 3.30.1 %
CVE-2025-2586Ols: unauthenticated metrics flooding in openshift lightspeed service leading to resource exhaustionHIGH 7.50.6 %
CVE-2024-11831Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascriptMEDIUM 5.41.1 %