795 matches found
CVE-2026-55602 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, argo-workflows, kubeflow-pipelines...
GHSA-GJ48-438W-JH9V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8RFP-98V4-MMR6 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8RFP-98V4-MMR6 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, label-studio...
GHSA-GJ48-438W-JH9V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, label-studio...
CVE-2026-54269 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, langfuse, jitsucom-jitsu, homepage, librechat, langfuse-fips, pulumi, vitess, nemo, kibana, cadence-web...
GHSA-F38Q-MGVJ-VPH7 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, langfuse, jitsucom-jitsu, homepage, librechat, langfuse-fips, pulumi, vitess, nemo, kibana, cadence-web...
CVE-2026-54269 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, pulumi, vitess, langfuse...
CVE-2026-12143 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, opensearch-dashboards, kubeflow-katib, kubeflow-centraldashboard, lerna, saf, sqlpad, argo-workflows, kubeflow-pipelines, prism, tileserver-gl, langfuse, nextcloud-server...
GHSA-HMW2-7CC7-3QXX vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, opensearch-dashboards, kubeflow-katib, kubeflow-centraldashboard, lerna, saf, sqlpad, argo-workflows, kubeflow-pipelines, prism, tileserver-gl, langfuse, nextcloud-server...
GHSA-F38Q-MGVJ-VPH7 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard, pulumi, vitess, langfuse...
GHSA-GV7W-RQVM-QJHR vulnerabilities
Vulnerabilities for packages: langfuse, argo-workflows, vite, kubeflow-pipelines, renovate, langfuse-fips, vitess...
GHSA-G7R4-M6W7-QQQR vulnerabilities
Vulnerabilities for packages: vite, kubeflow-pipelines...
GHSA-GV7W-RQVM-QJHR vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-pipelines, vite, renovate...
GHSA-G7R4-M6W7-QQQR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, vite...
CVE-2026-31229
A flaw was found in the Adversarial Robustness Toolbox ART, specifically within its Kubeflow component. This vulnerability, categorized as insecure deserialization CWE-502, occurs when loading model weights without proper security restrictions. A remote attacker can exploit this by uploading a...
CVE-2026-31230
A flaw was found in Adversarial Robustness Toolbox ART. This command-line argument injection vulnerability exists in its Kubeflow component due to the unsafe use of the eval function, which parses string values from --clipvalues and --inputshape arguments. A remote attacker can exploit this by...
CVE-2026-31228
A flaw was found in the Adversarial Robustness Toolbox ART, specifically within its Kubeflow component. The robustness evaluation function for PyTorch models uses the eval function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters without proper sanitization. A...