920 matches found
CVE-2026-111755 vulnerabilities
Vulnerabilities for packages: azurite, opensearch-dashboards-fips, prism, lerna, code-server, redisinsight, langfuse, configurable-http-proxy, langfuse-fips, kubeflow-pipelines, unleash, opensearch-dashboards, lambda-nodejs, kibana, semaphore, gitlab-rails-ce, homepage,...
GHSA-8R9P-F939-6H3C vulnerabilities
Vulnerabilities for packages: azurite, opensearch-dashboards-fips, prism, lerna, code-server, redisinsight, langfuse, configurable-http-proxy, langfuse-fips, kubeflow-pipelines, unleash, opensearch-dashboards, lambda-nodejs, kibana, semaphore, gitlab-rails-ce, homepage,...
GHSA-Q3JH-WRC6-JGQ8 vulnerabilities
Vulnerabilities for packages: azurite, opensearch-dashboards-fips, prism, lerna, code-server, redisinsight, langfuse, configurable-http-proxy, langfuse-fips, kubeflow-pipelines, unleash, opensearch-dashboards, lambda-nodejs, kibana, semaphore, gitlab-rails-ce, homepage,...
CVE-2026-111756 vulnerabilities
Vulnerabilities for packages: azurite, opensearch-dashboards-fips, prism, lerna, code-server, redisinsight, langfuse, configurable-http-proxy, langfuse-fips, kubeflow-pipelines, unleash, opensearch-dashboards, lambda-nodejs, kibana, semaphore, gitlab-rails-ce, homepage,...
GHSA-Q3JH-WRC6-JGQ8 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-pipelines, opensearch-dashboards, nextcloud-server, lerna, configurable-http-proxy, code-server...
GHSA-8R9P-F939-6H3C vulnerabilities
Vulnerabilities for packages: prism, kubeflow-pipelines, opensearch-dashboards, nextcloud-server, lerna, configurable-http-proxy, code-server...
CVE-2026-111755 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-pipelines, opensearch-dashboards, nextcloud-server, lerna, configurable-http-proxy, code-server...
CVE-2026-111756 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-pipelines, opensearch-dashboards, nextcloud-server, lerna, configurable-http-proxy, code-server...
CVE-2026-110220
A flaw was found in Kubeflow Model Registry. This Server-Side Request Forgery SSRF vulnerability allows an authenticated namespace user to provide an attacker-controlled address within an InferenceService resource annotation. When the controller processes the resource, it makes an outgoing reques...
CVE-2026-110220
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-110220
The Kubeflow Model Registry (versions through 0.3.17 ) is vulnerable to a Server-Side Request Forgery (SSRF) flaw. The root cause lies in the handling of the modelregistry.kubeflow.org/url annotation within the InferenceService Controller . This allows namespace users to create an InferenceServic...
EUVD-2026-99261
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-110220 Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-110220 Kubeflow Model Registry through 0.3.17 SSRF via InferenceService Controller URL Annotation
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
PT-2026-111844
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-110220: Server-Side Request Forgery (SSRF)
Kubeflow Model Registry through 0.3.17 contains a server-side request forgery vulnerability that allows namespace users to steal the controller ServiceAccount token via the modelregistry.kubeflow.org/url annotation. Attackers can create an InferenceService pointing the annotation at their server,...
CVE-2026-90711 vulnerabilities
Vulnerabilities for packages: thingsboard, kubeflow-pipelines, kubeflow-centraldashboard, langfuse, jupyter-base-notebook, sqlpad, tileserver-gl...
GHSA-JQCG-44MW-7W3H vulnerabilities
Vulnerabilities for packages: thingsboard, kubeflow-pipelines, kubeflow-centraldashboard, langfuse, jupyter-base-notebook, sqlpad, tileserver-gl...