Approved changes feed: RSS · Atom

cpe:2.3:a:kubeflow:kubeflow:1.7.0:*:*:*:*:*:*:*

part: a version: 1.7.0 update: *

VendorKubeflow (77ae1be4-7ba0-5fe9-a078-f8b5b06cfb80)
ProductKubeflow (2f48c07a-36f4-5278-be14-5c1087191a7b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/kubeflow/kubeflow purl2cpe 2026-06-01 10:15:30.028653
pkg:golang/github.com/kubeflow/kubeflow purl2cpe 2026-06-01 10:15:30.028654
pkg:sourceforge/kubeflow.mirror purl2cpe 2026-06-01 10:15:30.028656

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-6571 vulnerable 2026-06-08 06:21:54.945648 Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
MEDIUM (5.4)
Cross-site Scripting (XSS) - Reflected in kubeflow/kubeflow
Published: 2023-12-14T13:00:06.671Z
Updated: 2024-08-02T08:35:14.472Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-6570 vulnerable 2026-06-08 06:21:54.945262 Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
HIGH (7.7)
Server-Side Request Forgery (SSRF) in kubeflow/kubeflow
Published: 2023-12-14T12:59:57.426Z
Updated: 2024-08-02T08:35:14.402Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.