CLEANSTART-2026-DP55969 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16

Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-OZ32100 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16

Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: dependency-track, thingsboard, kserve-modelmesh, apache-nifi, apache-nifi-registry, management-api-for-apache-cassandra-5.0, akhq, sonar-scanner-cli, keycloak-config-cli, nextflow, cassandra-reaper, cassandra, trino, zookeeper...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: dependency-track, thingsboard, kserve-modelmesh, apache-nifi, apache-nifi-registry, management-api-for-apache-cassandra-5.0, akhq, sonar-scanner-cli, keycloak-config-cli, nextflow, cassandra-reaper, cassandra, trino, zookeeper...

CVE-2025-11226 vulnerabilities

Vulnerabilities for packages: nacos-docker, thingsboard, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, cassandra-fips, akhq, ontop-fips, apache-nifi, nextflow, zookeeper-fips, kayenta, sonar-scanner-cli,...

GHSA-25QH-J22F-PWP8 vulnerabilities

Vulnerabilities for packages: nacos-docker, thingsboard, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, cassandra-fips, akhq, ontop-fips, apache-nifi, nextflow, zookeeper-fips, kayenta, sonar-scanner-cli,...

EUVD-2025-31743

Malicious code in bioql PyPI...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A CVE is reported for KServe ModelMesh container images: a build-time /etc/passwd file created with group-writable permissions allows a non-root container user, if they are in the root group, to modify /etc/passwd and add a user with any UID (including 0), enabling full container root access. Thi...

CVE-2025-57852 Openshift-ai: privilege escalation via excessive /etc/passwd permissions

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

CVE-2025-57852

A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a...

PT-2025-39995

Name of the Vulnerable Software and Affected Versions KServe ModelMesh container images affected versions not specified Description A container privilege escalation flaw exists due to the /etc/passwd file being created with group-writable permissions during the build process. An attacker with the...

CVE-2025-48924 vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, keycloak-config-cli, zipkin, flyway, apicurio-registry, debezium-connector-spanner, thingsboard, apache-nifi-registry, apache-activemq-artemis, infinispan, wildfly, akhq, nextflow, logstash, apache-tika, solr, gradle, apache-nifi, nrjmx,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: sonar-scanner-cli, keycloak-config-cli, zipkin, flyway, apicurio-registry, debezium-connector-spanner, thingsboard, apache-nifi-registry, apache-activemq-artemis, infinispan, wildfly, akhq, nextflow, logstash, apache-tika, solr, gradle, apache-nifi, nrjmx,...

GHSA-J288-Q9X7-2F5V vulnerabilities

Vulnerabilities for packages: thingsboard, spdx-tools-java, liquibase, management-api-for-apache-cassandra-4.0, apache-hop-fips, zipkin, airflow, ghidra, kafka, opensearch, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, cassandra-fips, celeborn, akhq, logstash,...

GHSA-6V67-2WR5-GVF4 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, cassandra-fips, akhq, ontop-fips, sonarqube-10, sonarqube, apache-nifi, zookeeper-fips, sonar-scanner-cli, cassandra,...

CVE-2024-12801 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, cassandra-fips, akhq, ontop-fips, sonarqube-10, sonarqube, apache-nifi, zookeeper-fips, sonar-scanner-cli, cassandra,...

CVE-2024-12798 vulnerabilities

Vulnerabilities for packages: thingsboard, management-api-for-apache-cassandra-4.0, management-api-for-apache-cassandra-5.0, management-api-for-apache-cassandra-4.1, cassandra-fips, akhq, ontop-fips, sonarqube-10, sonarqube, apache-nifi, zookeeper-fips, sonar-scanner-cli, cassandra,...

GHSA-735F-PC8J-V9W8 vulnerabilities

Vulnerabilities for packages: thingsboard, ruby3.2-fluentd-kubernetes-daemonset, opensearch, kafka, celeborn, kube-fluentd-operator, hadoop-thirdparty, elasticsearch, sonarqube-10, apache-nifi, camunda-zeebe, emsdk, hadoop-fips, knative-kafka-broker, wavefront-proxy, druid,...