CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: openstack-nova-2025.2, tritonserver-backend-vllm-cuda-13.0, apache-beam-python-3.11-sdk, metaflow-service, openstack-nova-2025.1, k8s-sidecar, openstack-kolla-toolbox-2025.1, openstack-glance-2025.2, vllm-openai-cuda-13.0, in-toto, openstack-placement-2025.2, synapse...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-volumes-web-app, mitmproxy, in-toto, superset, kserve, datadog-agent, dask-kubernetes, open-webui, mycli, semgrep, py3-cassandra-medusa, airflow, k8s-sidecar...

CLEANSTART-2026-YP48558 Security fixes in k8s-sidecar 2.3.0-r0

Package k8s-sidecar version 2.3.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-jupyter-web-app, pypy-3.10, mlflow, dask-gateway, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines, az, airflow, pypy-3.11, kubeflow-katib, superset, py3-pipenv, reflex, k8s-sidecar, confluent-docker-utils, py3-pip, jupyter-base-notebook, kserve,...

CVE-2025-50181 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-jupyter-web-app, pypy-3.10, mlflow, dask-gateway, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines, az, airflow, pypy-3.11, kubeflow-katib, superset, py3-pipenv, datadog-agent, k8s-sidecar, confluent-docker-utils, py3-pip, jupyter-base-notebook,...

GHSA-48P4-8XCF-VXJ5 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-jupyter-web-app, pypy-3.10, mlflow, dask-gateway, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines, az, airflow, pypy-3.11, kubeflow-katib, superset, py3-pipenv, reflex, k8s-sidecar, confluent-docker-utils, py3-pip, jupyter-base-notebook, kserve,...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-jupyter-web-app, pypy-3.10, mlflow, dask-gateway, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines, az, airflow, pypy-3.11, kubeflow-katib, superset, py3-pipenv, datadog-agent, k8s-sidecar, confluent-docker-utils, py3-pip, jupyter-base-notebook,...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: py3-pipenv, airflow, k8s-sidecar, az, checkov, kubeflow-katib, py3.9-setuptools, py3-cassandra-medusa, superset, nemo, nvidia-nsight-compute-13.1, reflex, request-1276, nvidia-nsight-compute-13.2...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: py3-pipenv, airflow, k8s-sidecar, az, checkov, kubeflow-katib, py3.9-setuptools, py3-cassandra-medusa, superset, nemo, nvidia-nsight-compute-13.1, reflex, request-1276, nvidia-nsight-compute-13.2...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool, dask-gateway, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-pipelines, kserve, ggshield, kubeflow-katib, request-1276, py3-pipenv, py3-cassandra-medusa, nvidia-nsight-compute-13.1,...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, checkov, py3-certifi, mlflow, dask-gateway, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines, az, airflow, kubeflow-katib, superset, py3-pipenv, reflex, k8s-sidecar, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server,...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, checkov, py3-certifi, mlflow, dask-gateway, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines, az, airflow, kubeflow-katib, superset, py3-pipenv, reflex, k8s-sidecar, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server,...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-volumes-web-app, superset, py3-pipenv, checkov, kubeflow-pipelines, mlflow, patroni, az, jwt-tool, py3-cassandra-medusa, airflow, kubeflow-katib, reflex,...

GHSA-9WX4-H78V-VM56 vulnerabilities

Vulnerabilities for packages: ggshield, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-volumes-web-app, superset, py3-pipenv, checkov, kubeflow-pipelines, mlflow, patroni, az, jwt-tool, py3-cassandra-medusa, airflow, kubeflow-katib, reflex,...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool, dask-gateway, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-pipelines, kserve, ggshield, kubeflow-katib, request-1276, py3-pipenv, py3-cassandra-medusa, nvidia-nsight-compute-13.1,...

@gun-vue/relay (>=0.4.2 <=0.5.0), @mimik/configuration (>=4.4.10 <=5.0.11) +5 more potentially affected by CVE-2023-42282 via ip (=2.0.0)

ip NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ip and may be impacted: - @gun-vue/relay =0.4.2, =4.4.10, =1.0.0, =1.0.19, =1.0.0, =1.0.3 Source cves: CVE-2023-42282 Source advisory: OSV:GHSA-78XJ-CGH5-2H22...

GHSA-MQ26-G339-26XF vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool...

CVE-2023-5752 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, py3-tensorflow-serving-api, py3-pipenv, py3.13-scanner-test-libraries, az, k8s-sidecar, jwt-tool, kubeflow-katib, kubeflow-jupyter-web-app, py3-cassandra-medusa, nvidia-nsight-compute-13.1, request-1276, nvidia-nsight-compute-13.2...