CVE-2024-49767 vulnerabilities

Vulnerabilities for packages: py3-werkzeug, mlflow, kubeflow-pipelines-visualization-server, superset, kubeflow-volumes-web-app, emissary, kubeflow-jupyter-web-app...

CVE-2024-49766 vulnerabilities

Vulnerabilities for packages: py3-werkzeug, mlflow, kubeflow-pipelines-visualization-server, superset, kubeflow-volumes-web-app, emissary, kubeflow-jupyter-web-app...

GHSA-Q34M-JH98-GWM2 vulnerabilities

Vulnerabilities for packages: py3-werkzeug, mlflow, kubeflow-pipelines-visualization-server, superset, kubeflow-volumes-web-app, emissary, kubeflow-jupyter-web-app...

GHSA-F9VJ-2WH5-FJ8J vulnerabilities

Vulnerabilities for packages: py3-werkzeug, mlflow, kubeflow-pipelines-visualization-server, superset, kubeflow-volumes-web-app, emissary, kubeflow-jupyter-web-app...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app, superset, airflow-core, kubeflow-pipelines-visualization-server, nemo, py3-werkzeug...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: py3-werkzeug, superset, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-jupyter-web-app, superset, airflow-core, kubeflow-pipelines-visualization-server, nemo, py3-werkzeug...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: py3-werkzeug, superset, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app...

HTTP Request Smuggling

py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...