GHSA-64MM-VXMG-Q3VJ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

CVE-2026-55602 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, argo-workflows...

CVE-2026-55602 vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GHSA-64MM-VXMG-Q3VJ vulnerabilities

Vulnerabilities for packages: argo-workflows, kubeflow-pipelines...

GHSA-GJ48-438W-JH9V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-8RFP-98V4-MMR6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-GJ48-438W-JH9V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, label-studio...

GHSA-8RFP-98V4-MMR6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, label-studio...

CVE-2026-54269 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, jitsucom-jitsu, cadence-web, vitess, langfuse-fips, kubeflow-centraldashboard, pulumi...

GHSA-F38Q-MGVJ-VPH7 vulnerabilities

Vulnerabilities for packages: langfuse, kibana, jitsucom-jitsu, cadence-web, vitess, langfuse-fips, kubeflow-centraldashboard, pulumi...

CVE-2026-12143 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, argo-workflows, langfuse, saf, jitsucom-jitsu, kubeflow-pipelines, kubeflow-centraldashboard...

GHSA-HMW2-7CC7-3QXX vulnerabilities

Vulnerabilities for packages: opensearch-dashboards, argo-workflows, langfuse, saf, jitsucom-jitsu, kubeflow-pipelines, kubeflow-centraldashboard...

CVE-2026-54269 vulnerabilities

Vulnerabilities for packages: vitess, pulumi, langfuse, jitsucom-jitsu, kubeflow-centraldashboard...

GHSA-F38Q-MGVJ-VPH7 vulnerabilities

Vulnerabilities for packages: vitess, pulumi, langfuse, jitsucom-jitsu, kubeflow-centraldashboard...

GHSA-G7R4-M6W7-QQQR vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

GHSA-GV7W-RQVM-QJHR vulnerabilities

Vulnerabilities for packages: langfuse, vite, kubeflow-pipelines, vitess, argo-workflows, renovate, langfuse-fips...

GHSA-G7R4-M6W7-QQQR vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines...

GHSA-GV7W-RQVM-QJHR vulnerabilities

Vulnerabilities for packages: vitess, renovate, vite, argo-workflows, kubeflow-pipelines...

CVE-2026-31229

The Adversarial Robustness Toolbox ART thru 1.20.1 contains an insecure deserialization vulnerability CWE-502 in its Kubeflow component's model loading functionality. When loading model weights from a file e.g., model.pt during robustness evaluation, the code uses torch.load without the...

CVE-2026-31230

The Adversarial Robustness Toolbox ART thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component robustnessevaluationfgsmpytorch.py. The script uses the unsafe eval function to parse string values provided via the --clipvalues and --inputshape command-line...