github.com/kubeflow/pipelines vulnerabilities
CVEs whose affected-version data names the github.com/kubeflow/pipelines package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-118759High· 7.5Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
Kubeflow Pipelines: Run-log endpoint permits unauthorized access to pod logs
▾ Twilightkubeflow · github.com/kubeflow/pipelinesEPSS 0.34%via OSV
CVE-2026-118761High· 7.5Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
▾ Twilightkubeflow · github.com/kubeflow/pipelinesEPSS 0.50%via OSV