796 matches found
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, azureml-inference-server-http-fips, datadog-agent, kubeflow-pipelines, metaflow-service, wazuh-manager, label-studio, superset-fips, authentik-fips, airflow, openstack-keystone-2025.1, localstack, authentik, barman, spamcheck, mlflow,...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, azureml-inference-server-http-fips, datadog-agent, kubeflow-pipelines, metaflow-service, wazuh-manager, label-studio, superset-fips, authentik-fips, airflow, openstack-keystone-2025.1, localstack, authentik, barman, spamcheck, mlflow,...
CVE-2026-47237
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-47237
CVE-2026-47237 affects Kubeflow Community Distribution prior to version 26.03-rc.1. A Kubeflow setup based on official manifests or most packaged distributions is vulnerable to authorization token stealing from any Kubeflow UI/API user (Dashboard, Pipelines API, Notebooks). An attacker with kubef...
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-12590 vulnerabilities
Vulnerabilities for packages: langfuse, argo-workflows, code-server, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard, json-server, tileserver-gl...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: langfuse, argo-workflows, code-server, kubeflow-pipelines, sqlpad, kubeflow-centraldashboard, json-server, tileserver-gl...
GHSA-29GW-9793-FVW7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2023-24816 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2025-9906 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-36FQ-JGMW-4R9C vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-29GW-9793-FVW7 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-36FQ-JGMW-4R9C vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2025-9906 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2023-24816 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2022-32190 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...
CVE-2025-22873 vulnerabilities
Vulnerabilities for packages: kubeflow-katib...