796 matches found
GHSA-64MM-VXMG-Q3VJ vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib, argo-workflows...
CVE-2026-55602 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib, argo-workflows...
GHSA-GJ48-438W-JH9V vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8RFP-98V4-MMR6 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server...
GHSA-8RFP-98V4-MMR6 vulnerabilities
Vulnerabilities for packages: label-studio, kubeflow-pipelines-visualization-server...
GHSA-GJ48-438W-JH9V vulnerabilities
Vulnerabilities for packages: label-studio, kubeflow-pipelines-visualization-server...
CVE-2026-54269 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, homepage, langfuse, vitess, langfuse-fips, nemo, cadence-web, pulumi, kibana, jitsucom-jitsu, librechat...
GHSA-F38Q-MGVJ-VPH7 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, homepage, langfuse, vitess, langfuse-fips, nemo, cadence-web, pulumi, kibana, jitsucom-jitsu, librechat...
CVE-2026-54269 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, vitess, pulumi, kubeflow-centraldashboard, langfuse...
CVE-2026-12143 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-katib, saf, argo-workflows, prism, lerna, kubeflow-pipelines, nextcloud-server, sqlpad, kubeflow-centraldashboard, tileserver-gl, opensearch-dashboards, langfuse...
GHSA-HMW2-7CC7-3QXX vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, kubeflow-katib, saf, argo-workflows, prism, lerna, kubeflow-pipelines, nextcloud-server, sqlpad, kubeflow-centraldashboard, tileserver-gl, opensearch-dashboards, langfuse...
GHSA-F38Q-MGVJ-VPH7 vulnerabilities
Vulnerabilities for packages: jitsucom-jitsu, vitess, pulumi, kubeflow-centraldashboard, langfuse...
GHSA-GV7W-RQVM-QJHR vulnerabilities
Vulnerabilities for packages: argo-workflows, langfuse, vitess, langfuse-fips, vite, renovate, kubeflow-pipelines...
GHSA-G7R4-M6W7-QQQR vulnerabilities
Vulnerabilities for packages: vite, kubeflow-pipelines...
GHSA-GV7W-RQVM-QJHR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, vite, renovate, argo-workflows...
GHSA-G7R4-M6W7-QQQR vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, vite...
CVE-2026-31229
A flaw was found in the Adversarial Robustness Toolbox ART, specifically within its Kubeflow component. This vulnerability, categorized as insecure deserialization CWE-502, occurs when loading model weights without proper security restrictions. A remote attacker can exploit this by uploading a...
CVE-2026-31230
A flaw was found in Adversarial Robustness Toolbox ART. This command-line argument injection vulnerability exists in its Kubeflow component due to the unsafe use of the eval function, which parses string values from --clipvalues and --inputshape arguments. A remote attacker can exploit this by...
CVE-2026-31228
A flaw was found in the Adversarial Robustness Toolbox ART, specifically within its Kubeflow component. The robustness evaluation function for PyTorch models uses the eval function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters without proper sanitization. A...