Skip to content
OpenAdvisories

Package · Go

github.com/kubeflow/pipelines

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.6
    CVE-2026-77596

    Kubeflow Pipelines API server lacks authorization for shared pipeline uploads

    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the multi-user HTTP endpoints POST /apis/v2beta1/pipelines/upload and POST /apis/v2beta1/pipelines/upload_version call canUploadVersionedPipel…

    kubeflow pipelines github.com/kubeflow/pipelines Go