Vulnerability GO-2026-6899
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
9 hours ago
November 05, 2026 at 10:54 PM UTC
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory in github.com/kubeflow/pipelines
<0.0.0-20260831164314-ba9ae72cc860
<0.0.0-20260831164314-ba9ae72cc860
Summary
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory in github.com/kubeflow/pipelines
Details
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory in github.com/kubeflow/pipelines
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Unknown
9 hours ago
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs in github.com/kubeflow/pipelines
<0.0.0-20260904182349-be4723e33727 GO-2026-6900
<0.0.0-20260904182349-be4723e33727 GO-2026-6900
High Risk
6 days ago
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
1.7.0-alpha.3 GHSA-8fmv-6rg5-5924
1.7.0-alpha.3 GHSA-8fmv-6rg5-5924
High Risk
6 days ago
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
1.7.0-alpha.3 GHSA-wg5q-x4j9-qm54
1.7.0-alpha.3 GHSA-wg5q-x4j9-qm54
Unknown
1 year ago
Stored XSS in Kubeflow Pipeline View in github.com/kubeflow/pipelines
* GO-2024-3278
* GO-2024-3278
Impacted packages
Timeline
Published
9 hours ago
November 05, 2026 at 10:54 PM UTC
Fixed (v0.0.0-20260831164314-ba9ae72cc860)
2 months ago
August 31, 2026 at 04:43 PM UTC
Last Modified
8 hours ago
November 05, 2026 at 11:15 PM UTC