CVE-2024-49767 vulnerabilities

Vulnerabilities for packages: emissary, superset, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, mlflow, kubeflow-jupyter-web-app...

CVE-2024-49766 vulnerabilities

Vulnerabilities for packages: emissary, superset, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, mlflow, kubeflow-jupyter-web-app...

GHSA-Q34M-JH98-GWM2 vulnerabilities

Vulnerabilities for packages: emissary, superset, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, mlflow, kubeflow-jupyter-web-app...

GHSA-F9VJ-2WH5-FJ8J vulnerabilities

Vulnerabilities for packages: emissary, superset, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, mlflow, kubeflow-jupyter-web-app...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-pipelines-visualization-server, nemo, kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-volumes-web-app, airflow, airflow-core...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: superset, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: superset, kubeflow-pipelines-visualization-server, nemo, kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-volumes-web-app, airflow, airflow-core...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: superset, py3-werkzeug, kubeflow-volumes-web-app, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app...

HTTP Request Smuggling

py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...