GHSA-PPPJ-HQ3G-57PJ vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-89VP-JRXV-24W8 vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-WHVH-WF3X-G77J vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-H5V5-8746-G7MM vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-GX64-GJ6P-PC4C vulnerabilities

Vulnerabilities for packages: tensorflow-cpu-jupyter...

GHSA-539M-9XH6-Q6RR vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook...

GHSA-3F7W-8RR8-F37F vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook...

GHSA-P538-C434-8V24 vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook...

CLEANSTART-2026-GG76429 Security fixes in tensorflow-gpu-jupyter 2.21.0-r5

Package tensorflow-gpu-jupyter version 2.21.0-r5 fixes 28 vulnerabilities: ghsa-rch3-82jr-f9w9, ghsa-mqcg-5x36-vfcg, ghsa-37w4-hwhx-4rc4, ghsa-mf9v-mfxr-j63j, ghsa-5mrq-x3x5-8v8f...

CLEANSTART-2026-SI76903 Security fixes in tensorflow-gpu-jupyter 2.20.0-r0

Package tensorflow-gpu-jupyter version 2.20.0-r0 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six weeks earlier, on June 10. It runs commands as git on any self-managed 18.11.3 server that has not taken the update. Any authenticated user who can push to a project can run it...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: kserve, datadog-agent, kubeflow-pipelines-visualization-server, superset, mlflow, kubeflow-volumes-web-app, py3-cassandra-medusa, kubeflow-pipelines, mitmproxy, kubeflow-jupyter-web-app, k8s-sidecar, airflow...

GHSA-H35F-9H28-MQ5C vulnerabilities

Vulnerabilities for packages: kubeflow-katib, datadog-agent, superset, py3-pipenv, mlflow, kubeflow-volumes-web-app, httpie, py3-setuptools, pypy-3.10, kubeflow-jupyter-web-app, airflow...

CVE-2026-59885 vulnerabilities

Vulnerabilities for packages: kserve, datadog-agent, kubeflow-pipelines-visualization-server, superset, mlflow, kubeflow-volumes-web-app, py3-cassandra-medusa, kubeflow-pipelines, mitmproxy, kubeflow-jupyter-web-app, k8s-sidecar, airflow...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, datadog-agent, superset, py3-pipenv, mlflow, kubeflow-volumes-web-app, httpie, py3-setuptools, pypy-3.10, kubeflow-jupyter-web-app, airflow...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: kserve, datadog-agent, kubeflow-pipelines-visualization-server, superset, mlflow, kubeflow-volumes-web-app, py3-cassandra-medusa, kubeflow-pipelines, mitmproxy, kubeflow-jupyter-web-app, k8s-sidecar, airflow...

PYSEC-2026-3472 jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used

A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the alloworiginpat configuration is used. The issue arises from the use of re.match for validating the Origin header, which only anchors at the start of the string. This allow...

CVE-2026-59890 vulnerabilities

Vulnerabilities for packages: superset, httpie, opal, openstack-keystone-2026.1, nemo, datahub-ingestion, openstack-glance-2026.1, openstack-horizon-2025.2-fips, kubeflow-katib, openstack-placement-2025.2-fips, datahub-ingestion-fips, openstack-glance-2026.1-fips, openstack-horizon-2026.1-fips,...

GHSA-8PPF-4F7H-5PPJ vulnerabilities

Vulnerabilities for packages: superset, openstack-keystone-2026.1, localstack, kubeflow-pipelines-fips, azureml-inference-server-http-fips, datahub-ingestion, kubeflow, k8s-sidecar, datahub-ingestion-fips, wazuh-manager, mlflow, apache-beam-python-3.12-sdk, spamcheck,...

GHSA-HM4W-WWCW-MR6R vulnerabilities

Vulnerabilities for packages: superset, openstack-keystone-2026.1, localstack, kubeflow-pipelines-fips, azureml-inference-server-http-fips, datahub-ingestion, kubeflow, k8s-sidecar, datahub-ingestion-fips, wazuh-manager, mlflow, apache-beam-python-3.12-sdk, spamcheck,...