32 matches found
CLEANSTART-2026-EH11286 Security fixes for CVE-2026-27140, CVE-2026-27143, CVE-2026-27144, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32288, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 0.12.0-r1, 0.12.0-r2
Multiple security vulnerabilities affect the kserve-modelmesh-serving package. These issues are resolved in later releases. See references for individual vulnerability details...
CVE-2026-50010 vulnerabilities
Vulnerabilities for packages: celeborn, elasticsearch-fips, cassandra, infinispan, kafka, management-api-for-apache-cassandra-5.0, kserve-modelmesh, tez, pinot-fips, spark-kubernetes-operator-fips, kafbat-ui, reposilite, commercial-elasticsearch, apache-pulsar-fips, knative-kafka-broker, spark,...
CVE-2026-50020 vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, opensearch, kserve-modelmesh, thingsboard, spark, tez, wildfly, neo4j, docker-selenium, keycloak, flyway, strimzi-kafka-operator, management-api-for-apache-cassandra-5.0, logstash, infinispan...
GHSA-563Q-J3CM-6JXM vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, kserve-modelmesh, thingsboard, spark, docker-selenium, strimzi-kafka-operator, flyway, management-api-for-apache-cassandra-5.0, infinispan...
GHSA-HVCG-QMG6-JM4C vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, opensearch, kserve-modelmesh, thingsboard, spark, tez, wildfly, neo4j, docker-selenium, keycloak, flyway, strimzi-kafka-operator, management-api-for-apache-cassandra-5.0, logstash, infinispan...
CVE-2026-50560 vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, kserve-modelmesh, thingsboard, spark, docker-selenium, strimzi-kafka-operator, flyway, management-api-for-apache-cassandra-5.0, infinispan...
CVE-2026-50010 vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, kserve-modelmesh, thingsboard, spark, cassandra, tez, neo4j, docker-selenium, opensearch, flyway, solr, management-api-for-apache-cassandra-5.0, logstash, infinispan...
GHSA-C653-97M9-RCG9 vulnerabilities
Vulnerabilities for packages: apache-pulsar, druid, kserve-modelmesh, thingsboard, spark, cassandra, tez, neo4j, docker-selenium, opensearch, flyway, solr, management-api-for-apache-cassandra-5.0, logstash, infinispan...
CLEANSTART-2026-PK73499 Security fixes for CVE-2026-5588, CVE-2026-5598, ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-c3fc-8qff-9hwx, ghsa-fghv-69vj-qj49, ghsa-p93r-85wp-75v3, ghsa-prj3-ccx8-p6x4, ghsa-wg6q-6289-32hp, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16, 0.9.0-r1
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-EZ90321 Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS (PTR) when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper s...
Multiple security vulnerabilities affect the kserve-modelmesh package. Hostname verification in Apache ZooKeeper ZKTrustManager falls back to reverse DNS PTR when IP SAN validation fails, allowing attackers who control or spoof PTR records to impersonate ZooKeeper servers or clients with a valid...
CLEANSTART-2026-QG74410 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-7MR4-XJXG-34G6 vulnerabilities
Vulnerabilities for packages: crossplane-provider-azure-managedidentity, helm, sftpgo-plugin-geoipfilter, dapr, go-discover, spire-server, docker-cli, newrelic-fluent-bit-output, sftpgo, vault-benchmark, eksctl, kubernetes-csi-driver-nfs, ko, kubernetes-dashboard-api, prometheus, rancher-helm,...
CLEANSTART-2026-AA51484 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DP55969 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OZ32100 Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4, ghsa-xq3w-v528-46rv applied in versions: 0.12.0-r16
Multiple security vulnerabilities affect the kserve-modelmesh package. These issues are resolved in later releases. See references for individual vulnerability details...
GHSA-25QH-J22F-PWP8 vulnerabilities
Vulnerabilities for packages: akhq, thingsboard, cassandra-reaper, apache-nifi, cassandra, apache-nifi-registry, zookeeper, sonar-scanner-cli, nextflow, keycloak-config-cli, trino, dependency-track, management-api-for-apache-cassandra-5.0, kserve-modelmesh...
CVE-2025-11226 vulnerabilities
Vulnerabilities for packages: akhq, thingsboard, cassandra-reaper, apache-nifi, cassandra, apache-nifi-registry, zookeeper, sonar-scanner-cli, nextflow, keycloak-config-cli, trino, dependency-track, management-api-for-apache-cassandra-5.0, kserve-modelmesh...
CVE-2025-11226 vulnerabilities
Vulnerabilities for packages: ontop-fips, nacos-docker, cassandra, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, cassandra-fips, kserve-modelmesh, management-api-for-apache-cassandra-4.0, akhq, keycloak-config-cli, apache-nifi-registry, cassandra-reaper, knative-kafka-broker,...
GHSA-25QH-J22F-PWP8 vulnerabilities
Vulnerabilities for packages: ontop-fips, nacos-docker, cassandra, sonar-scanner-cli, management-api-for-apache-cassandra-5.0, cassandra-fips, kserve-modelmesh, management-api-for-apache-cassandra-4.0, akhq, keycloak-config-cli, apache-nifi-registry, cassandra-reaper, knative-kafka-broker,...
