CVE-2026-33079 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, datahub-ingestion-fips...

CVE-2026-42309 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server, superset...

CVE-2026-21883 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines-visualization-server...

jackson-databind: polymorphic typing issue allows attacker to read arbitrary local files on the server via crafted JSON message.

A new polymorphic typing flaw was discovered in FasterXML jackson-databind, versions 2.x through 2.9.9. With default typing enabled, an attacker can send a specifically crafted JSON message to the server that allows them to read arbitrary local files...