GHSA-R73J-PQJ5-W3X7 vulnerabilities

Vulnerabilities for packages: mlflow, kubeflow-pipelines-visualization-server, open-webui, superset...

CVE-2026-42311 vulnerabilities

Vulnerabilities for packages: mlflow, kubeflow-pipelines-visualization-server, open-webui, superset...

GHSA-PWV6-VV43-88GR vulnerabilities

Vulnerabilities for packages: mlflow, kubeflow-pipelines-visualization-server, open-webui, superset...

CVE-2026-39377 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, datahub-ingestion-fips, tensorflow-gpu-jupyter...

GHSA-4C99-QJ7H-P3VG vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, datahub-ingestion-fips, tensorflow-gpu-jupyter...

GHSA-7JQV-FW35-GMX9 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, datahub-ingestion-fips, tensorflow-gpu-jupyter...

CVE-2026-39378 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, tensorflow-cpu-jupyter, datahub-ingestion-fips, tensorflow-gpu-jupyter...

GHSA-7JQV-FW35-GMX9 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-4C99-QJ7H-P3VG vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2026-39378 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2026-39377 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

The vulnerability of the Metabase data visualization and reporting software, related to deficiencies in the deserialization mechanism, allows a perpetrator to execute arbitrary code.

The vulnerability of the Metabase data visualization and reporting software is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted YAML file...

[SECURITY] Fedora 44 Update: qt6-qtdatavis3d-6.10.3-1.fc44

Qt Data Visualization module provides multiple graph types to visualize data in 3D space both with C++ and Qt Quick 2...

[SECURITY] Fedora 44 Update: LabPlot-2.12.1-17.fc44

LabPlot is a FREE, open source and cross-platform Data Visualization and Analysis software accessible to everyone. - High-quality Data Visualization and Plotting with just a few clicks - Reliable and easy Data Analysis and Statistics, no coding required! - Intuitive and fast Computing with...

EUVD-2026-23291

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the /datasource/getTableField endpoint. The getTableFiledSql method in CalciteProvider.java incorporates the tableName parameter directly into SQL query string...

EUVD-2026-23284

DataEase is an open-source data visualization and analytics platform. Versions 2.10.20 and below contain a SQL injection vulnerability in the sort parameter of the /de2api/datasetData/enumValueObj endpoint. The DatasetDataManage service layer directly transfers the user-supplied sort value to the...

[SECURITY] Fedora 42 Update: polymake-4.15-3.fc42

Polymake is a tool to study the combinatorics and the geometry of convex polytopes and polyhedra. It is also capable of dealing with simplicial complexes, matroids, polyhedral fans, graphs, tropical objects, and so forth. Polymake can use various computational packages if they are installed. Thos...

CVE-2026-6309

Use after free in Viz in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

The vulnerability of the Oracle Cloud Infrastructure Designer and Visualization Toolkit (OKIT) software allows a hacker to compromise the system.

The vulnerability of the Oracle Cloud Infrastructure Designer and Visualization Toolkit OKIT software relates to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow a malicious actor to compromise the system remotely...

Apache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata

Stored Cross-Site Scripting XSS via Unsanitized Topology Metadata in Apache Storm UI Versions Affected: before 2.8.6 Description: The Storm UI visualization component interpolates topology metadata including component IDs, stream names, and grouping values directly into HTML via innerHTML in...