98 matches found
GHSA-MF9W-MJ56-HR94 vulnerabilities
Vulnerabilities for packages: ggshield, superset, keep, keep-fips, litellm, authentik-fips, localstack, authentik, kserve...
CVE-2026-28684 vulnerabilities
Vulnerabilities for packages: ggshield, superset, keep, keep-fips, litellm, authentik-fips, localstack, authentik, kserve...
CLEANSTART-2026-EZ90321 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s...
Multiple security vulnerabilities affect the kserve-modelmesh package. Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid...
CLEANSTART-2026-QG74410 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-32281 vulnerabilities
Vulnerabilities for packages: aws-application-networking-k8s, libnvidia-container, kpt, victoriametrics-cluster, sbom-convert, oras, metacontroller, docker-credential-ecr-login, ytt, rancher-system-upgrade-controller, prometheus-operator, rook, flux-notification-controller, verticadb-operator,...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: terraform-provider-kubernetes, hubble, keda, cert-manager-cmctl, libnvidia-container, syft, nuclei, seaweedfs, kubernetes, litestream, crossplane, kpt, prometheus-adapter, rancher, dkron, newrelic-infrastructure-agent, gitlab-kas, sftpgo-plugin-pubsub, yunikorn-k8shi...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: mitmproxy, kserve, py3-cassandra-medusa, semgrep, datadog-agent, ggshield, jupyter-base-notebook, superset, kubeflow-volumes-web-app, mycli, in-toto, k8s-sidecar, kubeflow-pipelines-visualization-server, open-webui, dask-kubernetes, kubeflow-jupyter-web-app, airflow...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: mitmproxy, kserve, py3-cassandra-medusa, semgrep, datadog-agent, ggshield, jupyter-base-notebook, superset, kubeflow-volumes-web-app, mycli, in-toto, k8s-sidecar, kubeflow-pipelines-visualization-server, open-webui, dask-kubernetes, kubeflow-jupyter-web-app, airflow...
GHSA-P423-J2CM-9VMQ vulnerabilities
Vulnerabilities for packages: label-studio, openstack-kolla-toolbox-2025.2, vllm-openai-cuda-12.9, opal, gitlab-cng-fips, open-webui, airflow, metaflow-service, dask-kubernetes, request-1276, superset, openstack-kolla-toolbox-2025.1, tritonserver-backend-vllm-cuda-13.0, localstack, nemo, mitmprox...
CVE-2026-39892 vulnerabilities
Vulnerabilities for packages: label-studio, openstack-kolla-toolbox-2025.2, vllm-openai-cuda-12.9, opal, gitlab-cng-fips, open-webui, airflow, metaflow-service, dask-kubernetes, request-1276, superset, openstack-kolla-toolbox-2025.1, tritonserver-backend-vllm-cuda-13.0, localstack, nemo, mitmprox...
CLEANSTART-2026-AA51484 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OZ32100 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DP55969 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-VX40916 Security fixes for CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-61732, CVE-2025-68119, CVE-2025-68121, CVE-2026-24051, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, ghsa-9h8m-3fm2-qjrq applied in versions: 0.16.0-r0
Multiple security vulnerabilities affect the kserve package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-HK71313 Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 0.12.0-r0, 0.12.0-r1, 0.12.0-r2
Multiple security vulnerabilities affect the kserve-rest-proxy package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-32274 vulnerabilities
Vulnerabilities for packages: kserve, open-webui...
GHSA-3936-CMFR-PM3M vulnerabilities
Vulnerabilities for packages: kserve, open-webui...
CVE-2026-32597 vulnerabilities
Vulnerabilities for packages: py3-cassandra-medusa, kserve, semgrep, datadog-agent, ggshield, superset, az, open-webui, airflow...