CVE-2024-39338 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, jitsucom-jitsu, kubeflow-pipelines, argo-workflows...

GHSA-MPG4-RC92-VX8V vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate...

CVE-2024-41818 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, renovate...

GHSA-JFMJ-5V4G-7637 vulnerabilities

Vulnerabilities for packages: checkov, kubeflow-pipelines, superset...

GHSA-JFMJ-5V4G-7637 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-pipelines, checkov...

CVE-2024-5569 vulnerabilities

Vulnerabilities for packages: checkov, kubeflow-pipelines, superset...

CVE-2024-5569 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-pipelines, checkov...

GHSA-248V-346W-9CWC vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app, k8s-sidecar, dask-gateway, superset, mlflow, barman, py3-pipenv, az, request-1276, kubeflow-katib, airflow, checkov, nvidia-nsight-compute-13.1, reflex, confluent-docker-utils, patroni, py3-certifi, jwt-tool,...

CVE-2024-39689 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app, k8s-sidecar, dask-gateway, superset, mlflow, barman, py3-pipenv, az, request-1276, kubeflow-katib, airflow, checkov, nvidia-nsight-compute-13.1, reflex, confluent-docker-utils, patroni, py3-certifi, jwt-tool,...

GHSA-H95X-26F3-88HR vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server...

GHSA-H95X-26F3-88HR vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2024-28397 vulnerabilities

Vulnerabilities for packages: apache-beam-python-3.11-sdk, kubeflow-pipelines-visualization-server...

CVE-2024-28397 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

Regular Expression Denial Of Service

kubeflow/kubeflow is vulnerable to Regular Expression Denial of Service ReDoS. The vulnerability is due to the usage of a regular expression to validate email addresses which has inefficient complexity, allowing an attacker to submit a crafted email which results in excessive CPU consumption,...

CVE-2024-37890 vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, gemini-cli, kubeflow-pipelines, arangodb, opensearch-dashboards, argo-workflows, kibana, kubeflow-centraldashboard...

CVE-2024-37890 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows...

CVE-2024-37891 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app, k8s-sidecar, dask-gateway, superset, mlflow, barman, py3-pipenv, az, request-1276, ggshield, kubeflow-katib, airflow, checkov, nvidia-nsight-compute-13.1, reflex, confluent-docker-utils, py3.13-scanner-test-librarie...

GHSA-3H5V-Q93C-6H6Q vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-centraldashboard, argo-workflows...

GHSA-3H5V-Q93C-6H6Q vulnerabilities

Vulnerabilities for packages: opensearch-dashboards-fips, gemini-cli, kubeflow-pipelines, arangodb, opensearch-dashboards, argo-workflows, kibana, kubeflow-centraldashboard...

CVE-2024-37168 vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, jitsucom-jitsu...