301 matches found
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451
A Server-Side Request Forgery (SSRF) vulnerability exists in KServe . A namespace-scoped user with permissions to create or update InferenceService custom resources can exploit this by providing a malicious storageUri. This flaw allows the storage-initializer init container to trigger arbitrary o...
CVE-2026-13451 Kserve: kserve: server-side request forgery via malicious storageuri
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
EUVD-2026-112458
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
PT-2026-129170
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
GHSA-VX6W-VV9F-6GVG vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112896 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112895 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112395 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112397 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112403 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112404 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
GHSA-58R4-6RV3-GFH8 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
CVE-2026-112899 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
GHSA-8G5G-8VMR-9782 vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...
GHSA-Q45J-58J2-45RG vulnerabilities
Vulnerabilities for packages: gftools, kserve, kubeflow-pipelines-visualization-server, py3-pillow, superset, open-webui...