KU
Product
Kubeflow
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 2Low 0
Watch
Add Kubeflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-5552 | 7.5 | Jun 6 | kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism Affected: before 1.9.0 |
| CVE-2023-6570 | 6.5 | Dec 14 | Server-Side Request Forgery (SSRF) in kubeflow/kubeflow Affected: 1.7.0 |
| CVE-2023-6571 | 6.1 | Dec 14 | Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow Affected: 1.7.0 |
Showing 3
