Skip to content
OpenAdvisories

Vendor

InseeFrLab

2 known vulnerabilities.

Products

onyxia 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.4
    CVE-2025-58366

    Onyxia private helm repository credentials are leaked through unauthenticated API

    Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public (unauthenticated) /public/catalogs endpoint.vOnly instances using private helm repositories (i.e…

    InseeFrLab onyxia
  • Critical 9.4
    CVE-2024-56333

    Remote code execution in onyxia-api

    Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a state of art working environment for data scientists. This critical vulnerability allows authenticated users to remotely execute code within the Ony…

    InseeFrLab onyxia