648 matches found
CVE-2026-59939 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-J5G9-F88F-GFJ3 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8PPF-4F7H-5PPJ vulnerabilities
Vulnerabilities for packages: k8s-sidecar, superset, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, datadog-agent, mitmproxy, kubeflow-volumes-web-app...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, superset, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, datadog-agent, mitmproxy, kubeflow-volumes-web-app...
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: k8s-sidecar, superset, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, datadog-agent, mitmproxy, kubeflow-volumes-web-app...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: k8s-sidecar, superset, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, datadog-agent, mitmproxy, kubeflow-volumes-web-app...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: superset, kubeflow-katib, kubeflow-jupyter-web-app, datadog-agent, httpie, kubeflow-volumes-web-app...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: superset, kubeflow-katib, kubeflow-jupyter-web-app, datadog-agent, httpie, kubeflow-volumes-web-app...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, superset-fips, spamcheck, openstack-glance-2026.1, datadog-agent-fips, openstack-horizon-2025.1, openstack-keystone-2026.1-fips, openstack-tempest-2026.1, openstack-glance-2026.1-fips, openstack-horizon-2025.1-fips, superset,...
GHSA-8PPF-4F7H-5PPJ vulnerabilities
Vulnerabilities for packages: superset-fips, k8s-sidecar, spamcheck, datadog-agent-fips, datahub-ingestion-fips, openstack-keystone-2026.1-fips, wazuh-manager, authentik, awx, kubeflow, superset, litellm, azureml-inference-server-http-fips, metaflow-service-fips, metaflow-service, gitlab-cng,...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: superset-fips, k8s-sidecar, spamcheck, datadog-agent-fips, datahub-ingestion-fips, openstack-keystone-2026.1-fips, wazuh-manager, authentik, awx, kubeflow, superset, litellm, azureml-inference-server-http-fips, metaflow-service-fips, metaflow-service, gitlab-cng,...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: openstack-horizon-2026.1-fips, superset-fips, spamcheck, openstack-glance-2026.1, datadog-agent-fips, openstack-horizon-2025.1, openstack-keystone-2026.1-fips, openstack-tempest-2026.1, openstack-glance-2026.1-fips, openstack-horizon-2025.1-fips, superset,...
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: superset-fips, k8s-sidecar, spamcheck, datadog-agent-fips, datahub-ingestion-fips, openstack-keystone-2026.1-fips, wazuh-manager, authentik, awx, kubeflow, superset, litellm, azureml-inference-server-http-fips, metaflow-service-fips, metaflow-service, gitlab-cng,...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: superset-fips, k8s-sidecar, spamcheck, datadog-agent-fips, datahub-ingestion-fips, openstack-keystone-2026.1-fips, wazuh-manager, authentik, awx, kubeflow, superset, litellm, azureml-inference-server-http-fips, metaflow-service-fips, metaflow-service, gitlab-cng,...
CVE-2026-47237
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-47237
CVE-2026-47237 affects Kubeflow Community Distribution prior to version 26.03-rc.1. A Kubeflow setup based on official manifests or most packaged distributions is vulnerable to authorization token stealing from any Kubeflow UI/API user (Dashboard, Pipelines API, Notebooks). An attacker with kubef...
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...