apicurioregistrysdk (2.4.6), lakehouse-engine (>=1.16.0, <=1.16.1) +1 more potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.5.0)

microsoft-kiota-http PYPI version 0.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - apicurioregistrysdk 2.4.6 - lakehouse-engine =1.16.0, =1.16.1 - msgraph-sdk 1.0.0a14 Source cves: CVE-2026-44503 Source...

lakehouse-engine (>=1.17.0, <=1.20.1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.1)

microsoft-kiota-http PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - lakehouse-engine =1.17.0, =1.20.1 Source cves: CVE-2026-44503 Source advisory: OSV:PYSEC-2026-2647...

aws-athena-mcp (1.0.1), fabric-lakehouse-mcp (>=0.3.1, <=0.3.15) +7 more potentially affected by CVE-2025-64340 via fastmcp (2.5.2)

fastmcp PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aws-athena-mcp 1.0.1 - fabric-lakehouse-mcp =0.3.1, =0.1.17, =0.32.2, =0.0.1, =0.1.6, =0.1.9 Source cves: CVE-2025-64340 Source advisory:...

aws-athena-mcp (1.0.1), fabric-lakehouse-mcp (>=0.3.1, <=0.3.15) +7 more potentially affected by CVE-2026-27124 via fastmcp (2.5.2)

fastmcp PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aws-athena-mcp 1.0.1 - fabric-lakehouse-mcp =0.3.1, =0.1.17, =0.32.2, =0.0.1, =0.1.6, =0.1.9 Source cves: CVE-2026-27124 Source advisory:...

autopilotml (>=1.0.1, <=1.0.14), chicken-coop (>=0.0.1, <=0.0.5) +11 more potentially affected by CVE-2024-22415 via jupyter-lsp (>=2.2.0, <=2.2.1)

jupyter-lsp PYPI version =2.2.0, =1.0.1, =0.0.1, =0.0.1, =1.16.0, =0.0.1, =0.82.0, =1.0.4, =0.0.2, =0.0.12 Source cves: CVE-2024-22415 Source advisory: OSV:PYSEC-2026-1478...

aws-athena-mcp (1.0.1), fabric-lakehouse-mcp (>=0.3.1, <=0.3.15) +7 more potentially affected by CVE-2026-32871 via fastmcp (2.5.2)

fastmcp PYPI version 2.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - aws-athena-mcp 1.0.1 - fabric-lakehouse-mcp =0.3.1, =0.1.17, =0.32.2, =0.0.1, =0.1.6, =0.1.9 Source cves: CVE-2026-32871 Source advisory:...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions...

CVE-2025-36145

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

CVE-2025-36145

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

CVE-2025-36145 Multiple Vulnerabilities in watsonx.data

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

CVE-2025-36145

CVE-2025-36145 affects IBM watsonx.data (Lakehouse) versions 2.2–2.3.1. The issue is inadequate restriction of inbound/outbound connections, enabling an attacker to transfer or modify files without proper controls. Impact: confidentiality/integrity concerns with file operations; no exploit detail...

CVE-2025-36145 Multiple Vulnerabilities in watsonx.data

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

EUVD-2025-209935

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

CVE-2025-36145

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

PT-2026-43280

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

CVE-2025-36145: Improper Restriction of Communication Channel to Intended Endpoints

IBM watsonx.data 2.2 through 2.3.1 IBM Lakehouse does not properly restrict inbound and outbound connections which could allow an attacker to transfer or modify files without restrictions...

lakehouse-engine (>=1.17.0, <=1.20.1) potentially affected by CVE-2026-44503 via microsoft-kiota-http (0.6.1)

microsoft-kiota-http PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on microsoft-kiota-http and may be impacted: - lakehouse-engine =1.17.0, =1.20.1 Source cves: CVE-2026-44503 Source advisory: OSV:GHSA-7J59-V9QR-6FQ9...

CVE-2025-36180

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions...

EUVD-2025-209603

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions...

CVE-2025-36180 Inadequate Pod Communication Restrictions, affects watsonx.data

IBM watsonx.data 2.2 through 2.3 IBM Lakehouse does not properly restrict communication between pods which could allow an attacker to transfer data between pods without restrictions...