21 matches found
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: openstack-tempest-2026.1, airflow, gitlab-cng-fips, apache-beam-python-3.13-sdk, crossplane-function-pythonic, localstack, openstack-keystone-2025.2, openstack-keystone-2026.1, kubeflow-volumes-web-app, openstack-placement-2026.1, py3-cassandra-medusa, ggshield,...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: mitmproxy, airflow, semgrep, k8s-sidecar, superset, py3-cassandra-medusa, kubeflow-volumes-web-app, mycli, kserve, in-toto, ggshield, dask-kubernetes, open-webui, datadog-agent...
CLEANSTART-2026-BC05591 Security fixes in k8s-sidecar 2.4.0-r0
Package k8s-sidecar version 2.4.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...
CLEANSTART-2026-JL48694 Security fixes in k8s-sidecar 1.25.2-r0
Package k8s-sidecar version 1.25.2-r0 fixes 5 vulnerabilities: CVE-2026-1703, CVE-2025-8869, CVE-2026-25645, CVE-2024-47081, CVE-2024-35195...
CLEANSTART-2026-SC87032 Security fixes in k8s-sidecar 2.5.4-1
Package k8s-sidecar version 2.5.4-1 fixes 4 vulnerabilities: CVE-2026-39892, CVE-2026-45409, CVE-2026-44431, CVE-2026-44432...
CLEANSTART-2026-SA70432 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-537c-gmf6-5ccf, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.4.0-r0, 2.4.0-r1
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-YC81398 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, CVE-2026-8643, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0, 2.7.4-r1
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NR60332 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-6357, CVE-2026-8643, ghsa-537c-gmf6-5ccf, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.5.5-r0
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-DD95169 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZO99127 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.7.1-r0
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-NN42198 Security fixes for CVE-2024-35195, CVE-2024-47081, CVE-2025-8869, CVE-2026-1703, CVE-2026-25645, CVE-2026-3219, CVE-2026-44431, CVE-2026-44432, CVE-2026-45409, CVE-2026-48710, CVE-2026-6357, ghsa-58qw-9mgm-455v, ghsa-65pc-fj4g-8rjx, ghsa-jp4c-xjxw-mgf9, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc applied in versions: 1.25.2-r0, 2.2.3-r0, 2.2.3-r1
Multiple security vulnerabilities affect the k8s-sidecar package. These issues are resolved in later releases. See references for individual vulnerability details...
PT-2026-46857
Impact Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In a misconfigured deployment e.g., following the production Docker example in the README, this is exploitable from the local network without...
CVE-2026-23490 vulnerabilities
Vulnerabilities for packages: airflow, k8s-sidecar, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kubeflow-pipelines, kubeflow-volumes-web-app, kserve, kubeflow-katib, dask-kubernetes, mlflow, kubeflow-jupyter-web-app, open-webui...
GHSA-63VM-454H-VHHQ vulnerabilities
Vulnerabilities for packages: airflow, k8s-sidecar, kubeflow-pipelines-visualization-server, py3-cassandra-medusa, kubeflow-pipelines, kubeflow-volumes-web-app, kserve, kubeflow-katib, dask-kubernetes, mlflow, kubeflow-jupyter-web-app, open-webui...
GHSA-63VM-454H-VHHQ vulnerabilities
Vulnerabilities for packages: airflow, gitlab-cng-fips, py3-cassandra-medusa, kubeflow-volumes-web-app, kserve, duplicity, gitlab-cng, ansible-operator-fips, litellm, spamcheck, authentik-fips, dbt-bigquery, k8s-sidecar, authentik, metaflow-service, label-studio, pgadmin4, dask-kubernetes,...
CVE-2026-23490 vulnerabilities
Vulnerabilities for packages: airflow, gitlab-cng-fips, py3-cassandra-medusa, kubeflow-volumes-web-app, kserve, duplicity, gitlab-cng, ansible-operator-fips, litellm, spamcheck, authentik-fips, dbt-bigquery, k8s-sidecar, authentik, metaflow-service, label-studio, pgadmin4, dask-kubernetes,...
GHSA-7F5H-V6XP-FCQ8 vulnerabilities
Vulnerabilities for packages: airflow, k8s-sidecar, reflex, kserve, mlflow, open-webui...
CVE-2025-62727 vulnerabilities
Vulnerabilities for packages: airflow, k8s-sidecar, reflex, kserve, mlflow, open-webui...