Login Request a demo
PI
Product
pipelines
by kubeflow · last CVE Aug 28, 2026
2
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 1High 0Medium 1Low 0
Severity
All severities2Critical1High0Medium1Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add pipelines to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54745
10.0
1%
Aug 28
Kubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true
Affected: < 2.17.0
CVE-2024-9526
5.4
0%
Nov 18
There exists a stored XSS Vulnerability in Kubeflow Pipeline View web UI. The Kubeflow Web UI allows to create new pipelines
Affected: before 2023-12-13
Showing 2