GHSA-XPV3-W29H-X7CV vulnerabilities

Vulnerabilities for packages: kserve, open-webui, kubeflow-jupyter-web-app, az, kubeflow-pipelines, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, ggshield, datadog-agent, jupyter-base-notebook, k8s-sidecar, kubeflow-katib, dask-kubernetes...

CVE-2026-49265 vulnerabilities

Vulnerabilities for packages: kserve, open-webui, kubeflow-jupyter-web-app, az, kubeflow-pipelines, kubeflow-pipelines-visualization-server, kubeflow-volumes-web-app, ggshield, datadog-agent, jupyter-base-notebook, k8s-sidecar, kubeflow-katib, dask-kubernetes...

Kibana visualization service DoS

The vulnerability of the Kibana visualization service’s collection management mechanism is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana Data Visualization Token Timestamp Disclosure

The vulnerability of the Kibana data visualization service is related to the improper processing of token timestamps. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information...

Kibana DoS

The vulnerability of the mechanism for processing internal API requests of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana Output Encoding

The vulnerability of the Kibana data visualization service is related to the lack of mechanisms for encoding or shielding the output data during header processing. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protect...

Kibana Policy Privilege Escalation

The vulnerability of the mechanism for managing policies of Kibana’s data visualization agents is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Kibana Visualization File Management Bypass

The vulnerability of the file and attachments management mechanism of the Kibana visualization service involves bypassing authentication using a key controlled by the user. Exploiting this vulnerability allows an attacker to circumvent security restrictions remotely...

Kibana Visualization Unauthorized Access

The vulnerability of the Kibana visualization service’s object identifier handling mechanism relates to bypassing authentication using a key controlled by the user. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Data Visualization Service Access Control Unauthorized Access

The vulnerability of the access control mechanism of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana XSS

The vulnerability of the Kibana data visualization service is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...

Kibana SSRF

The vulnerability of the Kibana data visualization service is related to insufficient testing of queries on the server side. Exploiting this vulnerability allows a malicious actor to perform an SSRF attack remotely...

Kibana Preprocessing DoS

The vulnerability of the mechanism for preprocessing compressed HTTP requests in the Kibana data visualization service is related to an uncontrolled consumption of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana Authentication Bypass Unauthorized Access

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana DoS

The vulnerability of the Kibana data visualization service is related to an error in handling exceptional states. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana Authentication Bypass Unauthorized Access

The vulnerability of the Kibana data visualization service is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Kibana Data Visualization Service Resource Consumption DoS

The vulnerability of the Kibana data visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Kibana visualization service DoS

The vulnerability of the automatic data import function of the Kibana visualization service is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Astra Linux – Vulnerability in vtk6, vtk7

There is a NULL pointer dereference vulnerability in VTK before 9.2.5. This vulnerability resides in the file IO/Infovis/vtkXMLTreeReader.cxx. The vendor did not check the return value of the libxml2 API function ‘xmlDocGetRootElement’, and tried to dereference that NULL pointer. This is unsafe, ...

ClickFix moves into the browser: Cryptocurrency theft with Google-hosted C2

Cisco Talos is tracking a cryptocurrency-stealing campaign that abuses the Google Visualization API for command and control C2, retrieving obfuscated JavaScript from a publicly published Google Sheets document and injecting it into the victim's browser session. The actors use a variation on...