CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2026.1, openstack-keystone-2026.1, dask-kubernetes, openstack-nova-2025.1, py3-cassandra-medusa, openstack-tempest-2025.2, dask-kubernetes-fips, vast-csi, metaflow-service, openstack-keystone-2025.2, dagster, dbt-bigquery, vllm-cuda-13.2,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: in-toto, py3-cassandra-medusa, ggshield, airflow, open-webui, datadog-agent, superset, kubeflow-volumes-web-app, dask-kubernetes, k8s-sidecar, mycli, mitmproxy, semgrep, kserve...

CLEANSTART-2026-YP48558 Security fixes in k8s-sidecar 2.3.0-r0

Package k8s-sidecar version 2.3.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: jwt-tool, pypy-3.10, jupyter-base-notebook, kubeflow-pipelines, kubeflow-jupyter-web-app, az, ggshield, airflow, kubeflow-katib, py3-pipenv, superset, py3-pip, py3-cassandra-medusa, pypy-3.11, emissary, dask-kubernetes, confluent-docker-utils, k8s-sidecar,...

CVE-2025-50181 vulnerabilities

Vulnerabilities for packages: jwt-tool, pypy-3.10, jupyter-base-notebook, kubeflow-pipelines, kubeflow-jupyter-web-app, az, ggshield, airflow, kubeflow-katib, py3-pipenv, datadog-agent, superset, py3-pip, py3-cassandra-medusa, pypy-3.11, emissary, dask-kubernetes, confluent-docker-utils,...

GHSA-48P4-8XCF-VXJ5 vulnerabilities

Vulnerabilities for packages: jwt-tool, pypy-3.10, jupyter-base-notebook, kubeflow-pipelines, kubeflow-jupyter-web-app, az, ggshield, airflow, kubeflow-katib, py3-pipenv, superset, py3-pip, py3-cassandra-medusa, pypy-3.11, emissary, dask-kubernetes, confluent-docker-utils, k8s-sidecar,...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: jwt-tool, pypy-3.10, jupyter-base-notebook, kubeflow-pipelines, kubeflow-jupyter-web-app, az, ggshield, airflow, kubeflow-katib, py3-pipenv, datadog-agent, superset, py3-pip, py3-cassandra-medusa, pypy-3.11, emissary, dask-kubernetes, confluent-docker-utils,...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: az, reflex, superset, k8s-sidecar, nemo, airflow, checkov, nvidia-nsight-compute-13.1, py3-cassandra-medusa, py3-pipenv, nvidia-nsight-compute-13.2, request-1276, py3.9-setuptools, kubeflow-katib...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: az, reflex, superset, k8s-sidecar, nemo, airflow, checkov, nvidia-nsight-compute-13.1, py3-cassandra-medusa, py3-pipenv, nvidia-nsight-compute-13.2, request-1276, py3.9-setuptools, kubeflow-katib...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kubeflow-pipelines, kserve, dask-gateway, ggshield, checkov, py3-pipenv, py3-idna, nvidia-nsight-compute-13.1, confluent-docker-utils, nvidia-nsight-compute-13.2, kubeflow-volumes-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server,...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: jwt-tool, kubeflow-pipelines, kubeflow-jupyter-web-app, patroni, az, airflow, kubeflow-katib, checkov, py3-pipenv, superset, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-volumes-web-app, k8s-sidecar, py3-certifi,...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: jwt-tool, kubeflow-pipelines, kubeflow-jupyter-web-app, patroni, az, airflow, kubeflow-katib, checkov, py3-pipenv, superset, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-volumes-web-app, k8s-sidecar, py3-certifi,...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: patroni, az, jwt-tool, ggshield, py3-cassandra-medusa, airflow, reflex, kubeflow-katib, superset, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-volumes-web-app, k8s-sidecar, checkov, mlflow, kubeflow-pipelines, py3-pipenv,...

GHSA-9WX4-H78V-VM56 vulnerabilities

Vulnerabilities for packages: patroni, az, jwt-tool, ggshield, py3-cassandra-medusa, airflow, reflex, kubeflow-katib, superset, kubeflow-pipelines-visualization-server, confluent-docker-utils, kubeflow-volumes-web-app, k8s-sidecar, checkov, mlflow, kubeflow-pipelines, py3-pipenv,...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa, kubeflow-pipelines, kserve, dask-gateway, ggshield, checkov, py3-pipenv, py3-idna, nvidia-nsight-compute-13.1, confluent-docker-utils, nvidia-nsight-compute-13.2, kubeflow-volumes-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server,...

@gun-vue/relay (>=0.4.2 <=0.5.0), @mimik/configuration (>=4.4.10 <=5.0.11) +5 more potentially affected by CVE-2023-42282 via ip (=2.0.0)

ip NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ip and may be impacted: - @gun-vue/relay =0.4.2, =4.4.10, =1.0.0, =1.0.19, =1.0.0, =1.0.3 Source cves: CVE-2023-42282 Source advisory: OSV:GHSA-78XJ-CGH5-2H22...

GHSA-MQ26-G339-26XF vulnerabilities

Vulnerabilities for packages: jwt-tool, k8s-sidecar...

CVE-2023-5752 vulnerabilities

Vulnerabilities for packages: jwt-tool, k8s-sidecar...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: az, jwt-tool, k8s-sidecar, kubeflow-jupyter-web-app, nvidia-nsight-compute-13.1, kubeflow-volumes-web-app, py3-cassandra-medusa, nvidia-nsight-compute-13.2, py3-pipenv, py3-tensorflow-serving-api, py3.13-scanner-test-libraries, request-1276, kubeflow-katib...