onyxia vulnerabilities
2 known vulnerabilities in onyxia from InseeFrLab. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
2critical
0high
0exploited
9.4average CVSS score
Latest first
- 9.4 Critical severity
onyxia: Insufficiently Protected Credentials
Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public (unauthenticated) /public/catalogs endpoint.vOnly instances using private helm repositories (i.e
- 9.4 Critical severity
onyxia: Improper Control of Generation of Code
Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a state of art working environment for data scientists. This critical vulnerability allows authenticated users to remotely execute code within the Onyx