CVE-2024-37890 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows...

GHSA-3H5V-Q93C-6H6Q vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows...

CVE-2024-37168 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard...

GHSA-7V5V-9H63-CJ86 vulnerabilities

Vulnerabilities for packages: jitsucom-jitsu, kubeflow-centraldashboard...

CVE-2024-5552 ReDoS in kubeflow/kubeflow

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...

CVE-2024-5552 ReDoS in kubeflow/kubeflow

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...

CVE-2024-5552

CVE-2024-5552 affects kubeflow/kubeflow, specifically the centraldashboard-angular backend component. The vulnerability arises from inefficient regular expression complexity in the email validation logic, enabling a remote, unauthenticated attacker to trigger a denial of service via crafted input...

CVE-2024-29041 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, sqlpad, kubeflow-centraldashboard, argo-workflows...

GHSA-RV95-896H-C2VC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, sqlpad, kubeflow-centraldashboard, argo-workflows...

GHSA-RV95-896H-C2VC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, sqlpad, argo-workflows...

GHSA-CXJH-PQWP-8MFP vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, lerna, kibana, opensearch-dashboards, kubeflow-centraldashboard, opensearch-dashboards-fips, kubeflow-pipelines...

CVE-2024-28849 vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, lerna, kibana, opensearch-dashboards, kubeflow-centraldashboard, opensearch-dashboards-fips, kubeflow-pipelines...

CVE-2024-28849 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, configurable-http-proxy, lerna, kubeflow-centraldashboard...

GHSA-JCHW-25XP-JWWC vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, lerna, kibana, opensearch-dashboards, kubeflow-centraldashboard, opensearch-dashboards-fips, kubeflow-pipelines...

GHSA-JCHW-25XP-JWWC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, configurable-http-proxy, lerna, kubeflow-centraldashboard...

CVE-2023-26159 vulnerabilities

Vulnerabilities for packages: configurable-http-proxy, lerna, kibana, opensearch-dashboards, kubeflow-centraldashboard, opensearch-dashboards-fips, kubeflow-pipelines...

CVE-2023-26159 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, configurable-http-proxy, lerna, kubeflow-centraldashboard...

GHSA-P8P7-X288-28G6 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines...

CVE-2023-28155 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, kubeflow-pipelines...

GHSA-MXHP-79QH-MCX6 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard...