801 matches found
GHSA-G7R4-M6W7-QQQR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, vite...
CVE-2026-31229
A flaw was found in the Adversarial Robustness Toolbox ART, specifically within its Kubeflow component. This vulnerability, categorized as insecure deserialization CWE-502, occurs when loading model weights without proper security restrictions. A remote attacker can exploit this by uploading a...
CVE-2026-31230
A flaw was found in Adversarial Robustness Toolbox ART. This command-line argument injection vulnerability exists in its Kubeflow component due to the unsafe use of the eval function, which parses string values from --clipvalues and --inputshape arguments. A remote attacker can exploit this by...
CVE-2026-31228
A flaw was found in the Adversarial Robustness Toolbox ART, specifically within its Kubeflow component. The robustness evaluation function for PyTorch models uses the eval function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters without proper sanitization. A...
CVE-2026-34993 vulnerabilities
Vulnerabilities for packages: checkov, open-webui, airflow, dask-kubernetes, kubeflow-katib...
CVE-2026-47265 vulnerabilities
Vulnerabilities for packages: checkov, open-webui, airflow, dask-kubernetes, kubeflow-katib...
GHSA-HG6J-4RV6-33PG vulnerabilities
Vulnerabilities for packages: checkov, open-webui, airflow, dask-kubernetes, kubeflow-katib...
GHSA-JG22-MG44-37J8 vulnerabilities
Vulnerabilities for packages: checkov, open-webui, airflow, dask-kubernetes, kubeflow-katib...
GHSA-HG6J-4RV6-33PG vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, py3-vllm-cuda-13.0, kubeflow-katib, py3.13-scanner-test-libraries-aiohttp, datahub-ingestion, awx, dask-kubernetes-fips, tritonserver-backend-vllm-cuda-12.9, dask-kubernetes, keep, airflow-core, py3-vllm-cuda-12.4,...
GHSA-JG22-MG44-37J8 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, py3-vllm-cuda-13.0, kubeflow-katib, py3.13-scanner-test-libraries-aiohttp, datahub-ingestion, awx, dask-kubernetes-fips, tritonserver-backend-vllm-cuda-12.9, dask-kubernetes, keep, airflow-core, py3-vllm-cuda-12.4,...
CVE-2026-34993 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, py3-vllm-cuda-13.0, kubeflow-katib, py3.13-scanner-test-libraries-aiohttp, datahub-ingestion, awx, dask-kubernetes-fips, tritonserver-backend-vllm-cuda-12.9, dask-kubernetes, keep, airflow-core, py3-vllm-cuda-12.4,...
CVE-2026-47265 vulnerabilities
Vulnerabilities for packages: datahub-ingestion-fips, py3-vllm-cuda-13.0, kubeflow-katib, py3.13-scanner-test-libraries-aiohttp, datahub-ingestion, awx, dask-kubernetes-fips, tritonserver-backend-vllm-cuda-12.9, dask-kubernetes, keep, airflow-core, py3-vllm-cuda-12.4,...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-centraldashboard, sqlpad, code-server, json-server, langfuse, kubeflow-pipelines, opensearch-dashboards, renovate, argo-workflows, py3-jupyterlab, saf, tileserver-gl, kubeflow-katib, thingsboard...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-centraldashboard, sqlpad, code-server, json-server, langfuse, kubeflow-pipelines, opensearch-dashboards, renovate, argo-workflows, py3-jupyterlab, saf, tileserver-gl, kubeflow-katib, thingsboard...
CVE-2026-8723 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, sqlpad, redisinsight, tileserver-gl-fips, prism, argo-workflows, kubescape-grype-offline-db, py3-captum, opensearch-dashboards, thingsboard, thingsboard-fips, langfuse-fips, gitlab-rails-ce, wazuh-dashboard, json-server, kubeflow-pipelines,...
GHSA-Q8MJ-M7CP-5Q26 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, sqlpad, redisinsight, tileserver-gl-fips, prism, argo-workflows, kubescape-grype-offline-db, py3-captum, opensearch-dashboards, thingsboard, thingsboard-fips, langfuse-fips, gitlab-rails-ce, wazuh-dashboard, json-server, kubeflow-pipelines,...
PT-2026-42178
Name of the Vulnerable Software and Affected Versions Istio affected versions not specified Kubeflow affected versions not specified Description Overly permissive permissions in Istio allow for the theft of Kubeflow authorization tokens. Recommendations At the moment, there is no information abou...
CVE-2026-44288 vulnerabilities
Vulnerabilities for packages: renovate, pulumi, kubeflow-centraldashboard, vitess...