CyberSecBulletin

InseeFrLab vulnerabilities

We track 2 vulnerabilities in InseeFrLab products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 5, 2025.

2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score

Latest InseeFrLab vulnerabilities

  • 9.4 Critical severity

    onyxia: Insufficiently Protected Credentials

    CVE-2025-58366InseeFrLab

    Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public (unauthenticated) /public/catalogs endpoint.vOnly instances using private helm repositories (i.e

  • 9.4 Critical severity

    onyxia: Improper Control of Generation of Code

    CVE-2024-56333InseeFrLab

    Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a state of art working environment for data scientists. This critical vulnerability allows authenticated users to remotely execute code within the Onyx