GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kubeflow-jupyter-web-app, k8s-sidecar, ggshield, kubeflow-pipelines, jupyter-base-notebook, datadog-agent, kubeflow-pipelines-visualization-server, az, kubeflow-volumes-web-app, kubeflow-katib, kserve, open-webui...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, kubeflow-jupyter-web-app, k8s-sidecar, ggshield, kubeflow-pipelines, jupyter-base-notebook, datadog-agent, kubeflow-pipelines-visualization-server, az, kubeflow-volumes-web-app, kubeflow-katib, kserve, open-webui...

CVE-2026-54745

A flaw was found in Kubeflow Pipelines. An unauthenticated attacker can exploit a Server-Side Request Forgery SSRF and HTTP smuggling vulnerability through the /proxy/ route. This allows the attacker to bypass authorization and forward arbitrary requests to internal services. Consequently, this c...

CVE-2026-82397 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-gpu-jupyter, litellm, dask-kubernetes, mitmproxy...

GHSA-WWV5-G3V4-889X vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-gpu-jupyter, litellm, dask-kubernetes, mitmproxy...

GHSA-MPF4-983Q-P7J4 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-gpu-jupyter, litellm, dask-kubernetes, mitmproxy...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-gpu-jupyter, litellm, dask-kubernetes, mitmproxy...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.12-sdk, apache-beam-python-3.11-sdk, open-webui, label-studio, apache-beam-python-3.13-sdk, nemo, kubeflow-pipelines-visualization-server, py3-nltk...

CVE-2026-82397 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server...

GHSA-CV2G-M8RR-888C vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, py3-nltk...

GHSA-WWV5-G3V4-889X vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server...

GHSA-MPF4-983Q-P7J4 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server...

GHSA-8423-8FGW-73VQ vulnerabilities

Vulnerabilities for packages: dask-kubernetes, mitmproxy, kubeflow-pipelines-visualization-server...

CVE-2026-66393 vulnerabilities

Vulnerabilities for packages: open-webui, kubeflow-pipelines-visualization-server, py3-nltk...

CVE-2026-54745

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

CVE-2026-54745

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...

EUVD-2026-67790

Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...