820 matches found
CVE-2026-54745
A flaw was found in Kubeflow Pipelines. An unauthenticated attacker can exploit a Server-Side Request Forgery SSRF and HTTP smuggling vulnerability through the /proxy/ route. This allows the attacker to bypass authorization and forward arbitrary requests to internal services. Consequently, this c...
GHSA-8423-8FGW-73VQ vulnerabilities
Vulnerabilities for packages: litellm, kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy, tensorflow-gpu-jupyter...
GHSA-MPF4-983Q-P7J4 vulnerabilities
Vulnerabilities for packages: litellm, kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy, tensorflow-gpu-jupyter...
GHSA-WWV5-G3V4-889X vulnerabilities
Vulnerabilities for packages: litellm, kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy, tensorflow-gpu-jupyter...
CVE-2026-82397 vulnerabilities
Vulnerabilities for packages: litellm, kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy, tensorflow-gpu-jupyter...
CVE-2026-66393 vulnerabilities
Vulnerabilities for packages: nemo, apache-beam-python-3.11-sdk, label-studio, kubeflow-pipelines-visualization-server, py3-nltk, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, open-webui...
GHSA-CV2G-M8RR-888C vulnerabilities
Vulnerabilities for packages: nemo, apache-beam-python-3.11-sdk, label-studio, kubeflow-pipelines-visualization-server, py3-nltk, apache-beam-python-3.12-sdk, apache-beam-python-3.13-sdk, open-webui...
GHSA-MPF4-983Q-P7J4 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kubeflow-pipelines-visualization-server, mitmproxy...
CVE-2026-66393 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, py3-nltk...
CVE-2026-82397 vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kubeflow-pipelines-visualization-server, mitmproxy...
GHSA-8423-8FGW-73VQ vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kubeflow-pipelines-visualization-server, mitmproxy...
GHSA-WWV5-G3V4-889X vulnerabilities
Vulnerabilities for packages: dask-kubernetes, kubeflow-pipelines-visualization-server, mitmproxy...
GHSA-CV2G-M8RR-888C vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, open-webui, py3-nltk...
CVE-2026-67313 vulnerabilities
Vulnerabilities for packages: gitlab-rails-ce, jitsucom-jitsu, prism, semaphore, langfuse-fips, kubeflow-centraldashboard, arangodb, lerna, wazuh-dashboard, nextcloud-server, awx, wazuh-dashboard-fips, kibana, azurite, opensearch-dashboards-fips, librechat, langfuse, gitlab-rails-ce-fips,...
GHSA-6HQM-HM2V-3P2P vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, lerna, kubeflow-centraldashboard, prism, langfuse, nextcloud-server, jitsucom-jitsu...
CVE-2026-67318 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, lerna, kubeflow-centraldashboard, prism, langfuse, nextcloud-server, jitsucom-jitsu...
GHSA-FQJ3-H9PC-443H vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, lerna, kubeflow-centraldashboard, prism, langfuse, nextcloud-server, jitsucom-jitsu...
CVE-2026-67319 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, lerna, kubeflow-centraldashboard, prism, langfuse, nextcloud-server, jitsucom-jitsu...