1158 matches found
CVE-2024-52804 vulnerabilities
Vulnerabilities for packages: dask-gateway, py3-tornado, airflow, kubeflow-pipelines-visualization-server...
GO-2024-3278 Stored XSS in Kubeflow Pipeline View in github.com/kubeflow/pipelines
Stored XSS in Kubeflow Pipeline View in github.com/kubeflow/pipelines...
CVE-2024-52582
Cachi2 (open source CLI) is affected up to version 0.13.x; when an unhandled exception occurs, the tool logs function locals, potentially exposing secrets in CI/build logs. Version 0.14.0 includes a patch to fix this. No other exploit details are provided in the documents. Remediation: upgrade to...
CVE-2024-52582 cachi2 allows traceback prints locals
Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...
CVE-2024-52582 cachi2 allows traceback prints locals
Cachi2 is a command-line interface tool that pre-fetches a project's dependencies to aid in making the project's build process network-isolated. Prior to version 0.14.0, secrets may be shown in logs when an unhandled exception is triggered because the tool is logging locals of each function. This...
CVE-2024-49767 vulnerabilities
Vulnerabilities for packages: airflow-core, kubeflow-volumes-web-app, py3-werkzeug, mlflow, emissary, superset, kubeflow-pipelines-visualization-server, airflow, kubeflow-jupyter-web-app...
BIT-GITLAB-2024-9164 Missing Authentication for Critical Function in GitLab
An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches...
CVE-2024-9164 Missing Authentication for Critical Function in GitLab
An issue was discovered in GitLab EE affecting all versions starting from 12.5 prior to 17.2.9, starting from 17.3, prior to 17.3.5, and starting from 17.4 prior to 17.4.2, which allows running pipelines on arbitrary branches...
CVE-2024-9164
Removed by vendor...
GitLab 安全漏洞
GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD continuous integration and continuous delivery, and other features. A security vulnerability exists in GitLab versions 12.5 up to and including...
Important: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Operator Bundle 1.16.0 release
Red Hat OpenShift Pipelines 1.16.0 has been released. Red Hat OpenShift Pipelines is a cloud-native continuous integration and delivery CI/CD solution for building pipelines using Tekton. Tekton is a flexible, Kubernetes-native, open-source CI/CD framework which enables automating deployments...
Moderate: Red Hat Enhancement Advisory: Red Hat OpenShift Pipelines Client tkn for 1.16.0 release
Red Hat OpenShift Pipelines Client tkn for 1.16.0 has been released. Red Hat OpenShift Pipelines Client, tkn for the 1.16.0 release, provides a CLI tool to interact with the Pipelines and Triggers components provided by Red Hat OpenShift Pipelines 1.16.0 The tkn CLI tool is delivered as an RPM...
PT-2024-6775 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab EE versions 12.5 through 17.2.9 GitLab EE versions 17.3 through 17.3.5 GitLab EE versions 17.4 through 17.4.2 Description: The issue is related to errors in access control, allowing a remote attacker to run Continuous...
RHSA-2023:6059 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.12.1 release and security update
Bulletin has no description...
RHSA-2023:7699 Red Hat Security Advisory: Red Hat OpenShift Pipelines Client tkn for 1.10.6 release and security update
Bulletin has no description...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: argo-workflows, kubeflow-centraldashboard, sqlpad, thingsboard, kubeflow-pipelines...
GHSA-M6FV-JMCG-4JFG vulnerabilities
Vulnerabilities for packages: thingsboard, kubeflow-pipelines, argo-workflows, kubeflow-centraldashboard, sqlpad...