795 matches found
PT-2026-40066
Name of the Vulnerable Software and Affected Versions Adversarial Robustness Toolbox versions prior to 1.20.2 Description A flaw exists in the Kubeflow component of the Adversarial Robustness Toolbox. The robustness evaluation function for PyTorch models utilizes the eval function to dynamically...
CVE-2026-31228
The Adversarial Robustness Toolbox ART thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe eval function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters...
CVE-2026-31229
The Adversarial Robustness Toolbox ART thru 1.20.1 contains an insecure deserialization vulnerability CWE-502 in its Kubeflow component's model loading functionality. When loading model weights from a file e.g., model.pt during robustness evaluation, the code uses torch.load without the...
PT-2026-40116
The Adversarial Robustness Toolbox ART thru 1.20.1 contains an insecure deserialization vulnerability CWE-502 in its Kubeflow component's model loading functionality. When loading model weights from a file e.g., model.pt during robustness evaluation, the code uses torch.load without the...
CVE-2026-31228
The connected documents confirm a vulnerability in the Adversarial Robustness Toolbox (ART) up to version 1.20.1, specifically in its Kubeflow component. The root cause is that the robustness evaluation function for PyTorch models uses Python’s unsafe eval() to dynamically evaluate user-supplied ...
PT-2026-40117
The Adversarial Robustness Toolbox ART thru 1.20.1 contains a command-line argument injection vulnerability in its Kubeflow component robustness evaluation fgsm pytorch.py. The script uses the unsafe eval function to parse string values provided via the --clip values and --input shape command-lin...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce-fips, tensorflow-cpu-jupyter, actions-runner, nemo, azurite, kubeflow-pipelines, dbgate-fips, opensearch-dashboards-fips, nextcloud-server, homepage, sqlpad, kibana, py3-jupyterlab, langfuse, dbgate, opensearch-dashboards, langfuse-fips, py3-captum,...
CVE-2026-41907 vulnerabilities
Vulnerabilities for packages: code-server, kubeflow-centraldashboard, kubeflow-katib, kubeflow-pipelines, sqlpad, nextcloud-server, argo-workflows, npm, opensearch-dashboards, prism, renovate, py3-jupyterlab, langfuse, saf, jitsucom-jitsu...
CVE-2026-40192 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
GHSA-WHJ4-6X5X-4V2J vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
GHSA-R73J-PQJ5-W3X7 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
GHSA-WJX4-4JCJ-G98J vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
CVE-2026-42309 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
CVE-2026-42311 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
GHSA-5XMW-VC9V-4WF2 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
CVE-2026-42310 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
GHSA-PWV6-VV43-88GR vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...
CVE-2026-42308 vulnerabilities
Vulnerabilities for packages: open-webui, superset, kubeflow-pipelines-visualization-server...