Approved changes feed: RSS · Atom
cpe:2.3:a:kubeflow:kubeflow:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Kubeflow (77ae1be4-7ba0-5fe9-a078-f8b5b06cfb80) |
|---|---|
| Product | Kubeflow (2f48c07a-36f4-5278-be14-5c1087191a7b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kubeflow/kubeflow |
purl2cpe | 2026-06-01 10:15:30.028644 |
pkg:golang/github.com/kubeflow/kubeflow |
purl2cpe | 2026-06-01 10:15:30.028647 |
pkg:sourceforge/kubeflow.mirror |
purl2cpe | 2026-06-01 10:15:30.028650 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5552 |
vulnerable | 2026-06-08 06:56:16.526103 |
ReDoS in kubeflow/kubeflow
HIGH (7.5)
kubeflow/kubeflow is vulnerable to a Regular Expression Denial of Service (ReDoS) attack due to inefficient regular expression complexity in its email validation mechanism. An attacker can remotely exploit this vulnerability without authentication by providing specially crafted input that causes the application to consume an excessive amount of CPU resources. This vulnerability affects the latest version of kubeflow/kubeflow, specifically within the centraldashboard-angular backend component. The impact of exploiting this vulnerability includes resource exhaustion, and service disruption.
Published: 2024-06-06T18:09:09.149Z
Updated: 2024-08-01T21:18:06.319Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.