Vulnerability GO-2024-3278
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
November 19, 2024 at 05:20 PM UTC
Stored XSS in Kubeflow Pipeline View in github.com/kubeflow/pipelines
v0.0.0-20261031015159-bc80b921dbf1 - v1.7.0-alpha.3
v0.0.0-20261031015159-bc80b921dbf1 - v1.7.0-alpha.3
Summary
Stored XSS in Kubeflow Pipeline View in github.com/kubeflow/pipelines
Details
Stored XSS in Kubeflow Pipeline View in github.com/kubeflow/pipelines
References
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
5 hours ago
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
v1.7.0-alpha.3 GHSA-8fmv-6rg5-5924
v1.7.0-alpha.3 GHSA-8fmv-6rg5-5924
High Risk
5 hours ago
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
v1.7.0-alpha.3 GHSA-wg5q-x4j9-qm54
v1.7.0-alpha.3 GHSA-wg5q-x4j9-qm54
Impacted packages
Timeline
Published
1 year ago
November 19, 2024 at 05:20 PM UTC
Last Modified
8 months ago
March 03, 2026 at 04:56 AM UTC