CVE-2024-49766 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-pipelines-visualization-server, emissary, kubeflow-volumes-web-app, airflow, superset, mlflow...

CVE-2024-49767 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-pipelines-visualization-server, emissary, kubeflow-volumes-web-app, airflow, superset, mlflow...

GHSA-Q34M-JH98-GWM2 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-pipelines-visualization-server, emissary, kubeflow-volumes-web-app, airflow, superset, mlflow...

GHSA-F9VJ-2WH5-FJ8J vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-pipelines-visualization-server, emissary, kubeflow-volumes-web-app, airflow, superset, mlflow...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: airflow-core, airflow, kubeflow-jupyter-web-app, nemo, kubeflow-volumes-web-app, superset, kubeflow-pipelines-visualization-server, py3-werkzeug...

CVE-2024-34069 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, airflow, superset...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: airflow-core, airflow, kubeflow-jupyter-web-app, nemo, kubeflow-volumes-web-app, superset, kubeflow-pipelines-visualization-server, py3-werkzeug...

GHSA-2G68-C3QC-8985 vulnerabilities

Vulnerabilities for packages: kubeflow-jupyter-web-app, py3-werkzeug, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, airflow, superset...

HTTP Request Smuggling

py3-werkzeug is vulnerable to http request smuggling. The vulnerability exists in .pre-commit-config.yaml because of missing dependents which allows an attacker to perform HTTP Request Smuggling using a crafted HTTP request...