836 matches found
GHSA-HW8R-X6GR-5GJP vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, prism, kubeflow-pipelines, kubeflow-katib...
GHSA-HW8R-X6GR-5GJP vulnerabilities
Vulnerabilities for packages: prism, kubeflow-katib, kubeflow-pipelines, kubeflow-centraldashboard...
CVE-2025-1302 vulnerabilities
Vulnerabilities for packages: kubeflow-centraldashboard, prism, kubeflow-pipelines, kubeflow-katib...
CVE-2025-1302 vulnerabilities
Vulnerabilities for packages: prism, kubeflow-katib, kubeflow-pipelines, kubeflow-centraldashboard...
SUSE CVE-2024-9526
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which are not filtered properly. Leading to a stored XSS. We...
CVE-2024-5552
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service ReDoS attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes th...
Malicious code in kubeflow-pipelines (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2025-199 Malicious code in kubeflow-pipelines (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-CJGQ-5QMW-RCJ6 vulnerabilities
Vulnerabilities for packages: py3-keras, kubeflow-pipelines-visualization-server...
CVE-2024-55459 vulnerabilities
Vulnerabilities for packages: py3-keras, kubeflow-pipelines-visualization-server...
GHSA-Q2X7-8RV6-6Q7H vulnerabilities
Vulnerabilities for packages: dask-gateway, nemo, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, apache-beam-python-3.11-sdk, ansible-operator, reflex, airflow, kserve, mlflow, emissary, kubeflow-jupyter-web-app, checkov, superset, py3-jinja2, localstack...
CVE-2024-56201 vulnerabilities
Vulnerabilities for packages: dask-gateway, nemo, kubeflow-volumes-web-app, apache-beam-python-3.11-sdk, ansible-operator, reflex, airflow, kserve, mlflow, emissary, kubeflow-jupyter-web-app, checkov, superset, py3-jinja2, localstack...
CVE-2024-56326 vulnerabilities
Vulnerabilities for packages: dask-gateway, nemo, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, apache-beam-python-3.11-sdk, ansible-operator, reflex, airflow, kserve, mlflow, emissary, kubeflow-jupyter-web-app, checkov, superset, py3-jinja2, localstack...
CVE-2024-52798 vulnerabilities
Vulnerabilities for packages: tileserver-gl, sqlpad, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard, thingsboard, grafana-image-renderer...
GHSA-RHX6-C78J-4Q9W vulnerabilities
Vulnerabilities for packages: tileserver-gl, sqlpad, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard, thingsboard, grafana-image-renderer...
GHSA-RHX6-C78J-4Q9W vulnerabilities
Vulnerabilities for packages: tileserver-gl-fips, tileserver-gl, kubeflow-pipelines, thingsboard, kubeflow-centraldashboard, sqlpad, arangodb, argo-workflows, grafana-image-renderer...
GHSA-8W49-H785-MJ3C vulnerabilities
Vulnerabilities for packages: dask-gateway, py3-tornado, kubeflow-pipelines-visualization-server, airflow...
CVE-2024-10220 vulnerabilities
Vulnerabilities for packages: rancher-webhook-fips, argocd-image-updater-fips, ip-masq-agent, aws-efs-csi-driver, argocd-image-updater, kubeflow-pipelines, kubernetes-dns-node-cache-fips, local-static-provisioner, local-static-provisioner-fips, rancher-webhook, nodetaint, k8s-device-plugin,...