807 matches found
GHSA-J5G9-F88F-GFJ3 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8PPF-4F7H-5PPJ vulnerabilities
Vulnerabilities for packages: kserve, airflow, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, superset, kubeflow-pipelines, mitmproxy, mlflow, datadog-agent, kubeflow-volumes-web-app...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: kserve, airflow, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, superset, kubeflow-pipelines, mitmproxy, mlflow, datadog-agent, kubeflow-volumes-web-app...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: airflow, pypy-3.10, kubeflow-jupyter-web-app, py3-setuptools, py3-pipenv, superset, kubeflow-katib, mlflow, datadog-agent, httpie, kubeflow-volumes-web-app...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: kserve, airflow, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, superset, kubeflow-pipelines, mitmproxy, mlflow, datadog-agent, kubeflow-volumes-web-app...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: airflow, pypy-3.10, kubeflow-jupyter-web-app, py3-setuptools, py3-pipenv, superset, kubeflow-katib, mlflow, datadog-agent, httpie, kubeflow-volumes-web-app...
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: kserve, airflow, k8s-sidecar, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, superset, kubeflow-pipelines, mitmproxy, mlflow, datadog-agent, kubeflow-volumes-web-app...
CVE-2026-59890 vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1-fips, spamcheck, openstack-horizon-2025.1, openstack-horizon-2025.1-fips, duplicity, opal, label-studio, openstack-keystone-2026.1, httpie, py3-pipenv, request-1276, datadog-agent-fips, wazuh-manager-fips, openstack-glance-2026.1-fips,...
GHSA-8PPF-4F7H-5PPJ vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, metaflow-service-fips, awx, kubeflow-pipelines-visualization-server, spamcheck, duplicity, label-studio, kubeflow, openstack-keystone-2026.1, py3-cassandra-medusa, request-1276, datadog-agent-fips, wazuh-manager-fips, wazuh-manager, authentik...
GHSA-HM4W-WWCW-MR6R vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, metaflow-service-fips, awx, kubeflow-pipelines-visualization-server, spamcheck, duplicity, label-studio, kubeflow, openstack-keystone-2026.1, py3-cassandra-medusa, request-1276, datadog-agent-fips, wazuh-manager-fips, wazuh-manager, authentik...
CVE-2026-59886 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, metaflow-service-fips, awx, kubeflow-pipelines-visualization-server, spamcheck, duplicity, label-studio, kubeflow, openstack-keystone-2026.1, py3-cassandra-medusa, request-1276, datadog-agent-fips, wazuh-manager-fips, wazuh-manager, authentik...
CVE-2026-59885 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-fips, metaflow-service-fips, awx, kubeflow-pipelines-visualization-server, spamcheck, duplicity, label-studio, kubeflow, openstack-keystone-2026.1, py3-cassandra-medusa, request-1276, datadog-agent-fips, wazuh-manager-fips, wazuh-manager, authentik...
GHSA-H35F-9H28-MQ5C vulnerabilities
Vulnerabilities for packages: openstack-glance-2025.1-fips, spamcheck, openstack-horizon-2025.1, openstack-horizon-2025.1-fips, duplicity, opal, label-studio, openstack-keystone-2026.1, httpie, py3-pipenv, request-1276, datadog-agent-fips, wazuh-manager-fips, openstack-glance-2026.1-fips,...
CVE-2026-47237
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
CVE-2026-47237
CVE-2026-47237 affects Kubeflow Community Distribution prior to version 26.03-rc.1. A Kubeflow setup based on official manifests or most packaged distributions is vulnerable to authorization token stealing from any Kubeflow UI/API user (Dashboard, Pipelines API, Notebooks). An attacker with kubef...
CVE-2026-47237 Kubeflow Community Distribution: Overly Permissive Istio Permissions Allows Kubeflow Authorization Token Stealing
Kubeflow Community Distribution helps users to install Kubeflow Platform in popular Kubernetes clusters. Prior to version 26.03-rc.1, a Kubeflow setup based on the official manifests or most other packaged Kubeflow distributions is vulnerable to authorization token stealing from any user of the...
GHSA-V422-HMWV-36X6 vulnerabilities
Vulnerabilities for packages: code-server, tileserver-gl, kubeflow-pipelines, langfuse, sqlpad, json-server, argo-workflows, kubeflow-centraldashboard...