PT-2026-46857

Impact Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deployment e.g., following the production Docker example in the README, this is exploitable from the local network without...

CVE-2026-23490 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-katib, airflow, kubeflow-pipelines, kubeflow-jupyter-web-app, dask-kubernetes, open-webui, kserve, mlflow, superset...

GHSA-63VM-454H-VHHQ vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kubeflow-volumes-web-app, k8s-sidecar, kubeflow-katib, airflow, kubeflow-pipelines, kubeflow-jupyter-web-app, dask-kubernetes, open-webui, kserve, mlflow, superset...

GHSA-63VM-454H-VHHQ vulnerabilities

Vulnerabilities for packages: dask-kubernetes, metaflow-service, pgadmin4, kserve, localstack, authentik-fips, gitlab-cng, kubeflow-jupyter-web-app, kubeflow-katib, open-webui, request-1276, apache-beam-python-3.11-sdk, spamcheck, py3-cassandra-medusa, kubeflow-pipelines, litellm, mlflow,...

CVE-2026-23490 vulnerabilities

Vulnerabilities for packages: dask-kubernetes, metaflow-service, pgadmin4, kserve, localstack, authentik-fips, gitlab-cng, kubeflow-jupyter-web-app, kubeflow-katib, open-webui, request-1276, apache-beam-python-3.11-sdk, spamcheck, py3-cassandra-medusa, kubeflow-pipelines, litellm, mlflow,...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, open-webui, kserve, reflex, mlflow...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, open-webui, kserve, reflex, mlflow...

CVE-2025-62727 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, nemo, kserve, k8s-sidecar, airflow-core, reflex...

GHSA-7F5H-V6XP-FCQ8 vulnerabilities

Vulnerabilities for packages: mlflow, open-webui, nemo, kserve, k8s-sidecar, airflow-core, reflex...

Multiple Kubernetes Sidecar Containers CVE-2019-11255 Unauthorized Access Vulnerability

Description Multiple Kubernetes Sidecar Containers are prone to an unauthorized access vulnerability. An attacker can exploit this issue to gain unauthorized access and perform unintended actions. This may lead to further attacks. Technologies Affected Kubernetes external-provisioner 0.4.1...