github.com/kubeflow/pipelines
Go3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/kubeflow/pipelinespage 1 of 1
- CVE-2024-9526MEDIUMCVSS 5.4EG 5.42024-11-18
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines. When creating a new pipeline, it is possible to add a description. The description field allows html tags, which…
- CVE-2026-118759HIGHCVSS 7.5EG 7.5fixed in 0.0.0-20260904182349-be4723e337272026-10-29
vulnerable: 1.7.0-alpha.3
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server's GET /apis/v1alpha1/runs/{run_id}/nodes/{node_id}/log handler retrieved logs without authorizing the calle…
- CVE-2026-118761HIGHCVSS 7.5EG 7.5fixed in 0.0.0-20260831164314-ba9ae72cc8602026-10-29
vulnerable: 1.7.0-alpha.3
Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the API server decompressed uploaded pipeline archives without adequately bounding expanded data while locating or reading…
Check whether github.com/kubeflow/pipelines is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/kubeflow/pipelines CVEs against the assets you own.
Book a Demo →