CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: crossplane-function-pythonic, kubeflow-volumes-web-app, ansible-operator-fips, metaflow-service, openstack-horizon-2025.1, gitlab-cng, mycli, kubeflow, dagster, authentik, opal, azureml-inference-server-http, openstack-glance-2026.1, openstack-horizon-2026.1,...

CVE-2026-69247 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, mycli, mitmproxy, ggshield, py3-cassandra-medusa, airflow, dask-kubernetes, k8s-sidecar, open-webui, superset, kserve, semgrep, datadog-agent, in-toto...

CLEANSTART-2026-MO39403 Security fixes in k8s-sidecar 2.4.0-r1

Package k8s-sidecar version 2.4.0-r1 fixes 2 vulnerabilities: CVE-2026-8643, ghsa-537c-gmf6-5ccf...

CLEANSTART-2026-YP48558 Security fixes in k8s-sidecar 2.3.0-r0

Package k8s-sidecar version 2.3.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...

CLEANSTART-2026-UC45646 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.6.0-r0, 2.6.0-r1

Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2025-50182 vulnerabilities

Vulnerabilities for packages: pypy-3.11, kubeflow-pipelines, confluent-docker-utils, az, ggshield, mlflow, py3-pip, kubeflow-katib, jupyter-base-notebook, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, superset, py3-pipenv, jwt-tool, dask-gateway, dask-kubernetes, kserve, reflex,...

CVE-2025-50181 vulnerabilities

Vulnerabilities for packages: pypy-3.11, kubeflow-pipelines, confluent-docker-utils, az, ggshield, mlflow, py3-pip, kubeflow-katib, jupyter-base-notebook, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, superset, py3-pipenv, jwt-tool, dask-gateway, dask-kubernetes, kserve,...

GHSA-48P4-8XCF-VXJ5 vulnerabilities

Vulnerabilities for packages: pypy-3.11, kubeflow-pipelines, confluent-docker-utils, az, ggshield, mlflow, py3-pip, kubeflow-katib, jupyter-base-notebook, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, superset, py3-pipenv, jwt-tool, dask-gateway, dask-kubernetes, kserve, reflex,...

GHSA-PQ67-6M6Q-MJ2V vulnerabilities

Vulnerabilities for packages: pypy-3.11, kubeflow-pipelines, confluent-docker-utils, az, ggshield, mlflow, py3-pip, kubeflow-katib, jupyter-base-notebook, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, superset, py3-pipenv, jwt-tool, dask-gateway, dask-kubernetes, kserve,...

GHSA-CX63-2MW6-8HW5 vulnerabilities

Vulnerabilities for packages: py3-pipenv, kubeflow-katib, nvidia-nsight-compute-13.1, py3-cassandra-medusa, airflow, request-1276, az, py3.9-setuptools, k8s-sidecar, superset, checkov, nemo, nvidia-nsight-compute-13.2, reflex...

CVE-2024-6345 vulnerabilities

Vulnerabilities for packages: py3-pipenv, kubeflow-katib, nvidia-nsight-compute-13.1, py3-cassandra-medusa, airflow, request-1276, az, py3.9-setuptools, k8s-sidecar, superset, checkov, nemo, nvidia-nsight-compute-13.2, reflex...

CVE-2024-3651 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, kubeflow-pipelines, confluent-docker-utils, az, ggshield, kubeflow-katib, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, py3-idna, py3-pipenv, jwt-tool, kubeflow-pipelines-visualization-server,...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-pipelines, confluent-docker-utils, az, py3-certifi, mlflow, kubeflow-katib, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, superset, py3-pipenv, jwt-tool, kubeflow-pipelines-visualization-server, dask-gateway, patroni,...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-pipelines, confluent-docker-utils, az, py3-certifi, mlflow, kubeflow-katib, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, superset, py3-pipenv, jwt-tool, kubeflow-pipelines-visualization-server, dask-gateway, patroni,...

CVE-2024-35195 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, mlflow, py3-pipenv, kubeflow-katib, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, airflow, kubeflow-pipelines, confluent-docker-utils, az, k8s-sidecar, kubeflow-jupyter-web-app, superset, checkov, patroni, reflex,...

GHSA-9WX4-H78V-VM56 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, mlflow, py3-pipenv, kubeflow-katib, jwt-tool, py3-cassandra-medusa, kubeflow-pipelines-visualization-server, airflow, kubeflow-pipelines, confluent-docker-utils, az, k8s-sidecar, kubeflow-jupyter-web-app, superset, checkov, patroni, reflex,...

GHSA-JJG7-2V4V-X38H vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, nvidia-nsight-compute-13.1, kubeflow-pipelines, confluent-docker-utils, az, ggshield, kubeflow-katib, py3-cassandra-medusa, k8s-sidecar, kubeflow-jupyter-web-app, py3-idna, py3-pipenv, jwt-tool, kubeflow-pipelines-visualization-server,...

GHSA-MQ26-G339-26XF vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool...

CVE-2023-5752 vulnerabilities

Vulnerabilities for packages: k8s-sidecar, jwt-tool...

GHSA-G4MX-Q9VG-27P4 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, py3-pipenv, kubeflow-katib, nvidia-nsight-compute-13.1, jwt-tool, py3-cassandra-medusa, py3.13-scanner-test-libraries, request-1276, py3-tensorflow-serving-api, az, kubeflow-jupyter-web-app, k8s-sidecar, nvidia-nsight-compute-13.2...