kubeflow/kubeflow vulnerabilities

1 known vulnerability in kubeflow/kubeflow from Kubeflow. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  kubeflow/kubeflow: Inefficient Regular Expression Complexity

  CVE-2024-5552Jun 6, 2024Kubeflow

  kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing