watson_speech_services_cartridge vulnerabilities
CVEs whose affected-version data names the watson_speech_services_cartridge package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
CVE-2026-19319Medium· 5.3IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read in Onnx
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16725Medium· 6.5IBM Watson Speech Services Cartridge is vulnerable to a Path Traversal in LangSmith
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote authenticated attacker to read arbitrary files from the local filesystem due to path traversal.
CVE-2026-17493High· 7.5IBM Watson Speech Services Cartridge is vulnerable to a D.O.S. in Unpacker.
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-82418Critical· 9.8IBM Watson Speech Services Cartridge is vulnerable to a Use After Free condition in cryptography wheels OpenSSL
IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due to a use-after-free vulnerability.