223 matches found
CVE-2025-57852
A CVE is reported for KServe ModelMesh container images: a build-time /etc/passwd file created with group-writable permissions allows a non-root container user, if they are in the root group, to modify /etc/passwd and add a user with any UID (including 0), enabling full container root access. Thi...
CVE-2025-57852
A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...
CVE-2025-57852: Incorrect Default Permissions
A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...
PT-2025-39995
Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: hivemind, addon-resizer, dagdotdev, mongodb-kubernetes-operator, kube-vip, vault-k8s, secrets-store-csi-driver-provider-aws, sftpgo-plugin-geoipfilter, vault-benchmark, gitsign, confluent-common-docker, vexctl, container-object-storage-interface, grafana-operator,...
CVE-2025-47906 vulnerabilities
Vulnerabilities for packages: kube-vip, kubeflow-katib, php-fpmexporter, openbao-k8s-fips, prometheus-node-exporter-fips, mattmoor-chainit, pvc-autoresizer, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, knative-eventing, nvidia-nsight-compute-12.9, addon-resizer,...
GHSA-GWRF-JF3H-W649 vulnerabilities
Vulnerabilities for packages: kube-vip, kubeflow-katib, php-fpmexporter, openbao-k8s-fips, prometheus-node-exporter-fips, mattmoor-chainit, pvc-autoresizer, newrelic-fluent-bit-output, secrets-store-csi-driver-provider-aws-fips, knative-eventing, nvidia-nsight-compute-12.9, addon-resizer,...
CVE-2025-48924 vulnerabilities
Vulnerabilities for packages: nextflow, confluent-kafka, apicurio-registry, apache-tika, dependency-track, druid, gradle, celeborn, sonar-scanner-cli, spark, cassandra, flyway, apache-nifi, jenkins-plugin-manager, zipkin, sonarqube, thingsboard, akhq, logstash, maven-stage0, solr,...
GHSA-J288-Q9X7-2F5V vulnerabilities
Vulnerabilities for packages: nextflow, confluent-kafka, apicurio-registry, apache-tika, dependency-track, druid, gradle, celeborn, sonar-scanner-cli, spark, cassandra, flyway, apache-nifi, jenkins-plugin-manager, zipkin, sonarqube, thingsboard, akhq, logstash, maven-stage0, solr,...
CVE-2025-48924 vulnerabilities
Vulnerabilities for packages: apicurio-registry, kserve-modelmesh, zipkin, spark, apache-tika, celeborn, gradle, leiningen, solr, kafka, cassandra-reaper, debezium-connector-spanner, nextflow, tritonserver-backend-vllm-cuda-12.9, neo4j, jenkins-plugin-manager, logstash, keycloak-config-cli,...
GHSA-J288-Q9X7-2F5V vulnerabilities
Vulnerabilities for packages: apicurio-registry, kserve-modelmesh, zipkin, spark, apache-tika, celeborn, gradle, leiningen, solr, kafka, cassandra-reaper, debezium-connector-spanner, nextflow, tritonserver-backend-vllm-cuda-12.9, neo4j, jenkins-plugin-manager, logstash, keycloak-config-cli,...
GHSA-XG2H-7CXJ-3GVH vulnerabilities
Vulnerabilities for packages: kserve...
GHSA-XG2H-7CXJ-3GVH vulnerabilities
Vulnerabilities for packages: kserve...
CVE-2024-57000 vulnerabilities
Vulnerabilities for packages: kserve...
CVE-2024-57000 vulnerabilities
Vulnerabilities for packages: kserve...
GHSA-6V67-2WR5-GVF4 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, zookeeper-fips, trino, cassandra-reaper, dependency-track, thingsboard, ontop-fips, cassandra, hadoop-fips, sonar-scanner-cli, tez, sonarqube-10, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, akhq, apache-nifi,...
GHSA-PR98-23F8-JWXV vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, zookeeper-fips, trino, cassandra-reaper, dependency-track, thingsboard, ontop-fips, cassandra, hadoop-fips, sonar-scanner-cli, tez, sonarqube-10, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, akhq, apache-nifi,...
CVE-2024-12801 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, zookeeper-fips, trino, cassandra-reaper, dependency-track, thingsboard, ontop-fips, cassandra, hadoop-fips, sonar-scanner-cli, tez, sonarqube-10, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, akhq, apache-nifi,...
CVE-2024-12798 vulnerabilities
Vulnerabilities for packages: kserve-modelmesh, zookeeper-fips, trino, cassandra-reaper, dependency-track, thingsboard, ontop-fips, cassandra, hadoop-fips, sonar-scanner-cli, tez, sonarqube-10, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, akhq, apache-nifi,...