Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0

The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...

Important: Red Hat Security Advisory: Red Hat OpenShift Pipelines Release 1.18.0

The 1.18.0 GA release of Red Hat OpenShift Pipelines Operator.. For more details see product documentation. The 1.18.0 release of Red Hat OpenShift Pipelines Operator...

CVE-2025-1550 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

GHSA-48G7-3X6R-XFHP vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2025-1550 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

CVE-2025-27152 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-pipelines, kubeflow-centraldashboard, lerna, jitsucom-jitsu, tileserver-gl...

CVE-2025-27152 vulnerabilities

Vulnerabilities for packages: airflow, opensearch-dashboards, kubeflow-centraldashboard, tileserver-gl-fips, lerna, arangodb, tileserver-gl, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce, prism, jitsucom-jitsu, kubeflow-pipelines...

GHSA-JR5F-V2JV-69X6 vulnerabilities

Vulnerabilities for packages: prism, kubeflow-pipelines, kubeflow-centraldashboard, lerna, jitsucom-jitsu, tileserver-gl...

GHSA-JR5F-V2JV-69X6 vulnerabilities

Vulnerabilities for packages: airflow, opensearch-dashboards, kubeflow-centraldashboard, tileserver-gl-fips, lerna, arangodb, tileserver-gl, gitlab-rails-ce-fips, opensearch-dashboards-fips, gitlab-rails-ce, prism, jitsucom-jitsu, kubeflow-pipelines...

Malicious code in com.unity.render-pipelines.high-definition (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-1772 Malicious code in com.unity.render-pipelines.high-definition (npm)

--- -= Per source details. Do not edit below this line.=-...

RHEA-2024:4022 Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.15.0 release

Bulletin has no description...

RHEA-2024:7866 Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.16.0 release

Bulletin has no description...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: harbor-registry-fips, redka, newrelic-fluent-bit-output, wave, dive, confluent-common-docker, mc-fips, spicedb, crossplane-provider-gcp, gomplate, kyverno-policy-reporter-ui, kubeflow-katib, karpenter-fips, hey, kubecolor, cass-operator-fips-no-pvc-delete,...

The Overlooked Attack Surface: Securing Code Repositories, Pipelines, and Developer Infrastructure

Learn how Wiz for ASPM extends security to developer infrastructure by continuously enforcing secure defaults and detecting threats across the software supply chain...

Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-199 Malicious code in kubeflow-pipelines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b48fb3f0a2da611129fdadc65a4bb98ea67f4427bf3f7707de95c4b80ccb8eb8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-CJGQ-5QMW-RCJ6 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-keras...

CVE-2024-55459 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, py3-keras...

CVE-2024-56322

GoCD is a continuous deliver server. GoCD versions 16.7.0 through 24.4.0 inclusive can allow GoCD admins to abuse a hidden/unused configuration repository pipelines as code feature to allow XML External Entity XXE injection on the GoCD Server which will be executed when GoCD periodically scans...