LiteLLM: Authenticated command execution via MCP stdio test endpoints

Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles

Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources

Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod

Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation

undici vulnerable to cross-origin request routing via SOCKS5 proxy pool reuse

LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

vLLM's hardcoded trust_remote_code=True in NemotronVL and KimiK25 bypasses user security opt-out

Directory Traversal vulnerability in the extractFile method of org.codehaus.plexus.util.Expand in plexus-utils before 6d780b3378829318ba5c2d29547e0012d5b29642

Zip Slip Vulnerability in nltk/nltk Leading to Remote Code Execution

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide

Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

Case-sensitive excludedSubtrees name constraints cause Auth Bypass in crypto/x509

React Router SSR XSS in ScrollRestoration

Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

Path Traversal in keras-team/keras

Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode

Stored Cross-Site Scripting (XSS) in Vertex AI Python SDK Visualization

Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide

Safe Mode Bypass in keras-team/keras

TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Invalid Memory Access in Sentencepiece,

Arbitrary Code Execution in feast-dev/feast

Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

React Router has XSS Vulnerability

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default

NLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File Read

undici WebSocket client vulnerable to denial of service via fragment count bypass

ws: Memory exhaustion DoS from tiny fragments and data chunks

Netty's wrapping plain trust manager silently disables hostname verification

Netty HAProxy: Unbalanced Reference Count in Nested PP2_TYPE_SSL TLV Parsing Leads to Memory Exhaustion

netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

Netty: HAProxy SSL TLV parsing leaks retained slice on invalid TLV length

Invoking pathological RSA/DSA parameters may cause DoS in golang.org/x/crypto/ssh

ws: Uninitialized memory disclosure

Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

Netty: HTTP Header Injection via HttpProxyHandler Disabled Validation

urllib3: Decompression-bomb safeguards bypassed in parts of the streaming API

Quadratic string concatentation in consumeComment in net/mail

Quadratic string concatenation in consumePhrase in net/mail

Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE in net/http/internal/http2 in golang.org/x/net