CVE-2024-49767 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, mlflow, py3-werkzeug, superset, airflow, kubeflow-volumes-web-app, emissary...

CVE-2024-49766 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, mlflow, py3-werkzeug, superset, airflow, kubeflow-volumes-web-app, emissary...

GHSA-Q34M-JH98-GWM2 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, mlflow, py3-werkzeug, superset, airflow, kubeflow-volumes-web-app, emissary...

GHSA-F9VJ-2WH5-FJ8J vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, mlflow, py3-werkzeug, superset, airflow, kubeflow-volumes-web-app, emissary...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: nemo, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, airflow-core, superset, py3-werkzeug, kubeflow-volumes-web-app, airflow...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, superset, py3-werkzeug, kubeflow-volumes-web-app...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: nemo, kubeflow-jupyter-web-app, kubeflow-pipelines-visualization-server, airflow-core, superset, py3-werkzeug, kubeflow-volumes-web-app, airflow...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: airflow, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, superset, py3-werkzeug, kubeflow-volumes-web-app...

HTTP Request Smuggling

py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...