16 matches found
charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2026-69248 via cryptography (3.4.0)
cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2026-69248 Source advisory: OSV:PYSEC-2026-3554...
Seldon Core - Detect
Seldon Core, an open-source MLOps/LLMOps framework for deploying, monitoring, and scaling machine learning models on Kubernetes, was detected. Its Pipeline Gateway component, which routes inference requests between chained model pipelines, exposed an unauthenticated status endpoint returning a...
kozmo-core (0.1.0), scanflow (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-6839 via flask-cors (4.0.0a0)
flask-cors PYPI version 4.0.0a0 is affected by a known vulnerability. The following packages have a transitive dependency on flask-cors and may be impacted: - kozmo-core 0.1.0 - scanflow =0.1.0, =0.5.0.3, =1.18.2 Source cves: CVE-2024-6839 Source advisory: OSV:PYSEC-2026-1384...
charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2026-34073 via cryptography (3.4.0)
cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...
charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2026-26007 via cryptography (3.4.0)
cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...
charmcraft (>=1.4.0, <=2.2.0), optikka-design-data-layer (0.1.58) +4 more potentially affected by CVE-2024-0727 via cryptography (3.4.0)
cryptography PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - charmcraft =1.4.0, =4.2.3, =0.1.0, =1.7.0, =0.0.1, =0.0.4 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...
CVE-2023-39325 vulnerabilities
Vulnerabilities for packages: crossplane-provider-aws, kubeflow-katib, kube-state-metrics-fips, prometheus-pushgateway-fips, fuse-overlayfs-snapshotter, up, kubernetes-csi-livenessprobe-fips, terraform-provider-sendgrid-fips, prometheus-node-exporter, kubewatch, aws-efs-csi-driver-fips,...
CVE-2022-41723 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, hey, dynamic-localpv-provisioner-fips, restic, kube-state-metrics, terraform-provider-sendgrid-fips, wireguard-go, terraform-provider-sendgrid, k3d, grpcurl, go, kubeflow, kubeflow-fips, gke-gcloud-auth-plugin, dynamic-localpv-provisioner...
GHSA-VVPX-J8F3-3W6H vulnerabilities
Vulnerabilities for packages: kubeflow-katib, hey, dynamic-localpv-provisioner-fips, restic, kube-state-metrics, terraform-provider-sendgrid-fips, wireguard-go, terraform-provider-sendgrid, k3d, grpcurl, go, kubeflow, kubeflow-fips, gke-gcloud-auth-plugin, dynamic-localpv-provisioner...
GHSA-FXG5-WQ6X-VR4W vulnerabilities
Vulnerabilities for packages: kyverno...
CVE-2022-41721 vulnerabilities
Vulnerabilities for packages: kyverno...
GHSA-69CG-P879-7622 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kube-state-metrics, wireguard-go, terraform-provider-sendgrid, k3d, grpcurl, kubeflow, kubeflow-fips, dynamic-localpv-provisioner...
CVE-2022-27664 vulnerabilities
Vulnerabilities for packages: kubeflow-katib, hey, dynamic-localpv-provisioner-fips, terraform-provider-sendgrid-fips, kube-state-metrics, wireguard-go, terraform-provider-sendgrid, k3d, grpcurl, kubeflow, kubeflow-fips, dynamic-localpv-provisioner...
GHSA-R48Q-9G5R-8Q2H vulnerabilities
Vulnerabilities for packages: kubeflow-fips, kube-state-metrics, kubeflow...