820 matches found
CVE-2024-37891 vulnerabilities
Vulnerabilities for packages: dask-gateway, jwt-tool, nemo, kubeflow-pipelines, reflex, superset, checkov, confluent-docker-utils, kubeflow-jupyter-web-app, ggshield, k8s-sidecar, airflow, barman, kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, py3.13-scanner-test-libraries,...
GHSA-3H5V-Q93C-6H6Q vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, argo-workflows, kubeflow-pipelines...
GHSA-3H5V-Q93C-6H6Q vulnerabilities
Vulnerabilities for packages: argo-workflows, kibana, arangodb, opensearch-dashboards-fips, kubeflow-pipelines, kubeflow-centraldashboard, gemini-cli, opensearch-dashboards...
CVE-2024-37168 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard...
GHSA-7V5V-9H63-CJ86 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard...
GHSA-W235-7P84-XX57 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-gateway, airflow, py3-tornado...
GHSA-753J-MPMX-QQ6G vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-gateway, airflow, py3-tornado...
GHSA-JW8X-6495-233V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-scikit-learn, kubeflow-katib...
GHSA-JW8X-6495-233V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-katib, py3-scikit-learn...
GHSA-HRW6-WG82-CM62 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-jupyter-server...
CVE-2024-5206 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-katib, py3-scikit-learn...
CVE-2024-5206 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-scikit-learn, kubeflow-katib...
CVE-2024-5552 ReDoS in kubeflow/kubeflow
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...
CVE-2024-5552 ReDoS in kubeflow/kubeflow
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...
CVE-2024-5552 ReDoS in kubeflow/kubeflow
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...
CVE-2024-35178 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-jupyter-server...
PT-2024-36541 · Kubeflow · Kubeflow
Name of the Vulnerable Software and Affected Versions: kubeflow/kubeflow versions prior to the fixed version Description: The issue is related to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in the email validation mechanism. An attacker can...
Kubeflow Security Vulnerabilities
Kubeflow is a cloud-native platform open-sourced by Kubeflow. A security vulnerability exists in Kubeflow that stems from vulnerability to a Regular Expression Denial of Service ReDoS attack, where an attacker can cause an application to consume excessive CPU resources by providing specially...