301 matches found
ai-kubernetes-helm-chart-security
AI on Kubernetes: Helm chart security defaults evidence This repository holds the data and evidence behind the Sorami technical report "AI on Kubernetes: 10 of 14 Helm charts ship with no API auth" version 1.2. Read the report here: https://sorami.com.au/research/ai-kubernetes-helm-chart-security...
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451
A Server-Side Request Forgery (SSRF) vulnerability exists in KServe . A namespace-scoped user with permissions to create or update InferenceService custom resources can exploit this by providing a malicious storageUri. This flaw allows the storage-initializer init container to trigger arbitrary o...
EUVD-2026-112458
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451 Kserve: kserve: server-side request forgery via malicious storageuri
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-13451
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
PT-2026-129170
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious storageUri. This Server-Side Request Forgery SSRF vulnerability allows the storage-initializer init container to issue...
CVE-2026-112397 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
CVE-2026-112899 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
CVE-2026-112395 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
CVE-2026-112400 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
CVE-2026-112403 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
GHSA-58R4-6RV3-GFH8 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
CVE-2026-112896 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
CVE-2026-112895 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
GHSA-65QM-JVMH-6PQG vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
GHSA-P4WG-P73J-C528 vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...
GHSA-PCHR-8J38-3X4P vulnerabilities
Vulnerabilities for packages: kserve, kubeflow-pipelines-visualization-server, gftools, open-webui, py3-pillow, superset...