boxlite vulnerabilities
CVEs whose affected-version data names the boxlite package (pip, rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2026-47213Medium· 6.5BoxLite has a Timeout Bypass Vulnerability
BoxLite has a Timeout Bypass Vulnerability
▾ Sunlitboxlite · boxliteEPSS 0.27%via OSV
CVE-2026-46695Critical· 10.0Read-only volume remount bypass via guest CAP_SYS_ADMIN
Read-only volume remount bypass via guest CAP_SYS_ADMIN
▾ Midnightboxlite · boxliteEPSS 0.29%via OSV
CVE-2026-46703Critical· 10.0OCI layer symlink escape → arbitrary host write
OCI layer symlink escape → arbitrary host write
▾ Midnightboxlite · boxliteEPSS 0.48%via OSV