CLEANSTART-2026-NU71361 Security fix for CVE-2023-48713 applied in: kserve-modelmesh-serving 0.9.0-r1

Security vulnerability affects the kserve-modelmesh-serving package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-HP96456 Security fixes in kserve-modelmesh-serving 0.9.0-r1

Package kserve-modelmesh-serving version 0.9.0-r1 fixes 4 vulnerabilities: CVE-2022-1996, ghsa-r48q-9g5r-8q2h, CVE-2023-48713, ghsa-qmvj-4qr9-v547...

CVE-2023-48713

creationtimestamp| type| source ---|---|--- 2023-12-17 11:06:34+00:00| seen| https://t.me/ctinow/155575...

CVE-2023-48713

Knative Serving (on Kubernetes) contains a DoS flaw (CVE-2023-48713) caused by an unbound memory allocation in the /metrics response. If an attacker controls a pod sufficiently to influence its responses, they can trigger a denial of service in the autoscaler. The issue is specific to the metrics...