301 matches found
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451 Kserve: kserve: server-side request forgery via malicious storageuri
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
EUVD-2026-112458
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451
A Server-Side Request Forgery (SSRF) vulnerability exists in KServe . A namespace-scoped user with permissions to create or update InferenceService custom resources can exploit this by providing a malicious storageUri. This flaw allows the storage-initializer init container to trigger arbitrary o...
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
PT-2026-129170
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-112395 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112895 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112897 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112400 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112899 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
GHSA-C6HW-5GRF-FF96 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112404 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
GHSA-P4WG-P73J-C528 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
GHSA-462X-PGG6-55FP vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112896 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...
CVE-2026-112403 vulnerabilities
Vulnerabilities for packages: py3-pillow, superset, gftools, open-webui, kubeflow-pipelines-visualization-server, kserve...