CVE-2026-88981

In versions prior to 2.18.0 , Kubeflow Pipelines is vulnerable to an unauthenticated Server-Side Request Forgery (SSRF) . The issue exists because the frontend artifact download path (for source=s3 or source=minio) and the archived pod-log path accept providerInfo.Params.endpoint and S3-compatibl...

Palm Edge AliCloud OSS credentials have information leakage vulnerabilities

Palm Edge APP is a mobile unit association dating activities software. There is an information leakage vulnerability in the Palm Edge AliCloud OSS credentials. The vulnerability is caused by credential leakage due to the use of SDK with accessKeyId and accessKeySecret, endpoint built into the...