Skip to content
OpenAdvisories

Package · Wolfi

kubeflow-volumes-web-app

41 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 1.7
    CVE-2026-34073

    cryptography has incomplete DNS name constraint enforcement on peer names

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" presented during each val…

    pyca cryptography airflow-3 kserve-storage-controller Debian Alpine Wolfi PyPI
  • Low 2.3
    CVE-2026-27205

    Flask session does not add `Vary: Cookie` header when accessed in some ways

    Flask is a web server gateway interface (WSGI) web application framework. In versions 3.1.2 and below, when the session object is accessed, Flask should set the Vary: Cookie header., resulting in a Use of Cache Containing Sensitive Information vulnerability. …

    pallets flask open-webui airflow-3 Debian Ubuntu Wolfi PyPI
  • Low 1.8
    CVE-2025-47278

    Flask uses fallback key instead of current signing key

    Flask is a web server gateway interface (WSGI) web application framework. In Flask 3.1.0, the way fallback key configuration was handled resulted in the last fallback key being used for signing, rather than the current signing key. Signing is provided by the …

    pallets flask airflow-3 emissary Debian Azure Linux Wolfi PyPI