920 matches found
GHSA-WWV5-G3V4-889X vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy...
GHSA-8423-8FGW-73VQ vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy...
GHSA-MPF4-983Q-P7J4 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines-visualization-server, dask-kubernetes, mitmproxy...
CVE-2026-67313 vulnerabilities
Vulnerabilities for packages: semaphore, gitlab-rails-ce-fips, azurite, lerna, arangodb, wazuh-dashboard-fips, langfuse, kubeflow-centraldashboard, langfuse-fips, librechat, wazuh-dashboard, gitlab-rails-ce, opensearch-dashboards, nextcloud-server, jitsucom-jitsu, prism, awx, redisinsight, kibana...
GHSA-6HQM-HM2V-3P2P vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...
CVE-2026-67319 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...
GHSA-FQJ3-H9PC-443H vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...
CVE-2026-67318 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...
GHSA-FQ2J-3J99-RX65 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...
CVE-2026-67316 vulnerabilities
Vulnerabilities for packages: opensearch-dashboards, jitsucom-jitsu, langfuse, kubeflow-centraldashboard, lerna, prism, nextcloud-server...
CVE-2026-54745
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
EUVD-2026-67790
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
CVE-2026-54745
Kubeflow Pipelines prior to 2.17.0 is affected by an unauthenticated SSRF vulnerability in the frontend /_proxy/ route (proxy-middleware.ts). The _routePathWithReferer() function forwards an attacker-controlled HTTP/HTTPS origin to createProxyMiddleware without a host allowlist or filtering for l...
CVE-2026-54745
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
CVE-2026-54745 Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...
PT-2026-83226
Name of the Vulnerable Software and Affected Versions Kubeflow Pipelines versions prior to 2.17.0 Description The frontend exposes an unauthenticated server-side request forgery SSRF issue. The routePathWithReferer function accepts an arbitrary HTTP or HTTPS target and passes its origin to...
CVE-2026-54745: Improper Access Control
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.17.0, the Kubeflow Pipelines frontend exposes an unauthenticated server-side request forgery vulnerability through the /proxy/ route in frontend/server/proxy-middleware.ts. The...