ai-kubernetes-helm-chart-security

AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...

GHSA-27VJ-QCQG-25RC vulnerabilities

Vulnerabilities for packages: open-webui, kserve...

CVE-2026-104851 vulnerabilities

Vulnerabilities for packages: open-webui, kserve...

CVE-2026-105746

A flaw was found in Docling. The document processing pipeline fails to honor configurations that disable remote network services when utilizing the KServe V2 optical character recognition OCR model. This failure can result in unintended information disclosure, as page images from processed...

CVE-2026-105746 Docling: KServe v2 OCR engine does not enforce enable_remote_services

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kservev2ocrmodel.py sends page images to its configured endpoint without checki...

CVE-2026-105746 Docling: KServe v2 OCR engine does not enforce enable_remote_services

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kservev2ocrmodel.py sends page images to its configured endpoint without checki...

CVE-2026-105746

The Docling document processing library (versions 2.83.0 through 2.131.0 ) contains a flaw where the KServeV2OcrModel class fails to honor the pipeline_options.enable_remote_services setting. This oversight allows the application to transmit page images to configured external endpoints even when ...

CVE-2026-105746 Docling: KServe v2 OCR engine does not enforce enable_remote_services

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docling/models/stages/ocr/kservev2ocrmodel.py sends page images to its configured endpoint without checki...

CVE-2026-63374 vulnerabilities

Vulnerabilities for packages: open-webui, py3.14-anyio, kserve...

GHSA-5P39-CFHJ-2XMP vulnerabilities

Vulnerabilities for packages: open-webui, py3.14-anyio, kserve...

GHSA-82R6-8W77-94W6 vulnerabilities

Vulnerabilities for packages: open-webui, py3.14-anyio, kserve...

CVE-2026-64847 vulnerabilities

Vulnerabilities for packages: open-webui, py3.14-anyio, kserve...

CLEANSTART-2026-JM74413 Security fix for CVE-2025-11226 applied in: cassandra 5.0.6-r2, cassandra 5.0.8-r1, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.5-r0, cassandra-fips 5.0.6-r2, cassandra-reaper-fips 3.6.1-r3, cassandra-reaper-fips 3.7.1-r4, cassandra-reaper-fips 4.0.1-r1, confluent-common-docker 7.6.9-r3, kserve-modelmesh 0.10.0-r0, kserve-modelmesh 0.12.0-r0, schema-registry 7.7.8-r1, stargate 1.0.90-r4

CVE-2025-11226 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-LB17279 Security fix for GHSA-4cx2-fc23-5wg6 applied in: keycloak 26.1.4-r1, kserve-modelmesh 0.12.0-r16, logstash-fips 9.0.8-r3, orientdb 3.2.38-r0

GHSA-4cx2-fc23-5wg6 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-BS99432 Security fix for GHSA-735f-pc8j-v9w8 applied in: druid-fips 35.0.0-r1, kserve-modelmesh 0.12.0-r16, spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.4.4-r1, spark-sc213-jdk17-py312 3.5.8-r0, stargate 1.0.90-r4, stargate 2.0.44-r4

GHSA-735f-pc8j-v9w8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-PI41655 Security fix for CVE-2022-1996 applied in: argo-events 1.6.3-r1, cert-manager-webhook-pdns-fips 2.3.0-r0, kserve-modelmesh-serving 0.9.0-r1, kyverno-policy-reporter-kyverno-plugin-fips 1.3.1-r2

CVE-2022-1996 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IH24407 Security fix for CVE-2024-8088 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.3-r2

CVE-2024-8088 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-QV04553 Security fix for CVE-2024-6232 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.6-r0

CVE-2024-6232 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-TC99018 Security fix for CVE-2023-27043 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.6-r0

CVE-2023-27043 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-XR93772 Security fix for CVE-2024-4032 applied in: cassandra 5.0.6-r2, cassandra-fips 4.0.19-r3, cassandra-fips 4.1.10-r2, cassandra-fips 5.0.6-r2, kserve-storage-controller 0.19.0-r0, python3 3.12.6-r0

CVE-2024-4032 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...