795 matches found
GHSA-MPG4-RC92-VX8V vulnerabilities
Vulnerabilities for packages: renovate, kubeflow-pipelines...
CVE-2024-41818 vulnerabilities
Vulnerabilities for packages: renovate, kubeflow-pipelines...
GHSA-JFMJ-5V4G-7637 vulnerabilities
Vulnerabilities for packages: superset, kubeflow-pipelines, checkov...
GHSA-JFMJ-5V4G-7637 vulnerabilities
Vulnerabilities for packages: superset, kubeflow-pipelines, checkov...
CVE-2024-5569 vulnerabilities
Vulnerabilities for packages: superset, kubeflow-pipelines, checkov...
CVE-2024-5569 vulnerabilities
Vulnerabilities for packages: superset, kubeflow-pipelines, checkov...
GHSA-248V-346W-9CWC vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, reflex, py3-certifi, checkov, kubeflow-pipelines-visualization-server, py3-pipenv, jwt-tool, az, request-1276, barman, superset, nvidia-nsight-compute-13.2, k8s-sidecar, kubeflow-jupyter-web-app, confluent-docker-utils, airflow, patroni,...
CVE-2024-39689 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, reflex, py3-certifi, checkov, kubeflow-pipelines-visualization-server, py3-pipenv, jwt-tool, az, request-1276, barman, superset, nvidia-nsight-compute-13.2, k8s-sidecar, kubeflow-jupyter-web-app, confluent-docker-utils, airflow, patroni,...
GHSA-H95X-26F3-88HR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk...
GHSA-H95X-26F3-88HR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
CVE-2024-28397 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, apache-beam-python-3.11-sdk...
CVE-2024-28397 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
Regular Expression Denial Of Service
kubeflow/kubeflow is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to the usage of a regular expression to validate email addresses which has inefficient complexity, allowing an attacker to submit a crafted email which results in excessive CPU consumption,...
CVE-2024-37890 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, argo-workflows, arangodb, kubeflow-pipelines, kubeflow-centraldashboard, opensearch-dashboards, kibana, gemini-cli...
CVE-2024-37890 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard...
CVE-2024-37891 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, reflex, checkov, kubeflow-pipelines-visualization-server, py3-pipenv, nemo, jwt-tool, az, request-1276, barman, py3-urllib3, superset, nvidia-nsight-compute-13.2, k8s-sidecar, kubeflow-jupyter-web-app, confluent-docker-utils, airflow,...
GHSA-3H5V-Q93C-6H6Q vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard...
GHSA-3H5V-Q93C-6H6Q vulnerabilities
Vulnerabilities for packages: opensearch-dashboards-fips, argo-workflows, arangodb, kubeflow-pipelines, kubeflow-centraldashboard, opensearch-dashboards, kibana, gemini-cli...