CVE-2024-5552: Inefficient Regular Expression Complexity

kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...

CVE-2023-6571 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow

Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...

CVE-2023-6570 Server-Side Request Forgery (SSRF) in kubeflow/kubeflow

Server-Side Request Forgery SSRF in kubeflow/kubeflow...

CVE-2023-6571: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS - Reflected in kubeflow/kubeflow...