Approved changes feed: RSS · Atom
cpe:2.3:a:inseefrlab:onyxia:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Inseefrlab (0695c21d-4992-5c12-9771-7a45173e5ae0) |
|---|---|
| Product | Onyxia (7f3afecf-025a-50fc-a2dd-8725ce4c4b52) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-58366 |
vulnerable | 2026-06-08 07:35:18.053474 |
Onyxia private helm repository credentials are leaked through unauthenticated API
Onyxia is a data science environment for kubernetes. In versions 4.6.0 through 4.8.0, Onyxia-API leaked the credentials of private helm repositories in the public (unauthenticated) /public/catalogs endpoint.vOnly instances using private helm repositories (i.e setting username & password in the catalogs configuration) are affected. This is fixed in version 4.9.0.
Published: 2025-09-05T21:29:46.796Z
Updated: 2025-09-08T20:06:36.035Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-56333 |
vulnerable | 2026-06-08 06:54:17.732080 |
Remote code execution in onyxia-api
Onyxia is a web app that aims at being the glue between multiple open source backend technologies to provide a state of art working environment for data scientists. This critical vulnerability allows authenticated users to remotely execute code within the Onyxia-API, leading to potential consequences such as unauthorized access to other user environments and denial of service attacks. This issue has been patched in api versions 4.2.0, 3.1.1, and 2.8.2. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2024-12-20T19:52:25.818Z
Updated: 2024-12-24T16:38:50.448Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.