GHSA-HX9Q-6W63-J58V vulnerabilities

Vulnerabilities for packages: datadog-agent, emissary, kserve...

GHSA-C4P6-QG4M-9JMR vulnerabilities

Vulnerabilities for packages: kserve, k8sgpt...

CVE-2025-68476 vulnerabilities

Vulnerabilities for packages: kserve, k8sgpt...

GHSA-C4P6-QG4M-9JMR vulnerabilities

Vulnerabilities for packages: kserve, kserve-localmodelnode-agent, k8sgpt, kserve-fips, kserve-localmodelnode-agent-fips...

CVE-2025-68476 vulnerabilities

Vulnerabilities for packages: kserve, kserve-localmodelnode-agent, k8sgpt, kserve-fips, kserve-localmodelnode-agent-fips...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, mlflow, kserve, open-webui, reflex, airflow...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, mlflow, kserve, open-webui, reflex, airflow...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: airflow-core, open-webui, kserve, airflow, mlflow, k8s-sidecar, nemo, reflex...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: airflow-core, open-webui, kserve, airflow, mlflow, k8s-sidecar, nemo, reflex...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi-registry, sonar-scanner-cli, trino, kserve-modelmesh, keycloak-config-cli, management-api-for-apache-cassandra-5.0, zookeeper, cassandra-reaper, apache-nifi, dependency-track, thingsboard, cassandra, nextflow...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: akhq, apache-nifi-registry, sonar-scanner-cli, trino, kserve-modelmesh, keycloak-config-cli, management-api-for-apache-cassandra-5.0, zookeeper, cassandra-reaper, apache-nifi, dependency-track, thingsboard, cassandra, nextflow...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: localstack, zookeeper, knative-kafka-broker-fips, apache-nifi-registry, akhq, knative-kafka-broker, kserve-modelmesh, cassandra-reaper, kayenta, apache-nifi, dependency-track, nacos, ontop-fips, cassandra-fips, cassandra, trino, sonar-scanner-cli, keycloak-config-cli...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: localstack, zookeeper, knative-kafka-broker-fips, apache-nifi-registry, akhq, knative-kafka-broker, kserve-modelmesh, cassandra-reaper, kayenta, apache-nifi, dependency-track, nacos, ontop-fips, cassandra-fips, cassandra, trino, sonar-scanner-cli, keycloak-config-cli...

EUVD-2025-31743

Malicious code in bioql PyPI...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A CVE is reported for KServe ModelMesh container images: a build-time /etc/passwd file created with group-writable permissions allows a non-root container user, if they are in the root group, to modify /etc/passwd and add a user with any UID (including 0), enabling full container root access. Thi...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

PT-2025-39995

Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...

GHSA-GWRF-JF3H-W649 vulnerabilities

Vulnerabilities for packages: kube-vip, kuberay-operator, blobfuse2, kubeflow-katib, hivemind, kube-vip-cloud-provider, newrelic-fluent-bit-output, vexctl, php-fpmexporter, local-path-provisioner, terraform-provider-time, custom-pod-autoscaler-operator, kserve-rest-proxy, checksec,...