kubeflow-jupyter-web-app vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the kubeflow-jupyter-web-app package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
L Open Redirect	<1.10.0-r5
L Open Redirect	<1.10.0-r5
L GHSA-pq67-6m6q-mj2v	<1.10.0-r5
L GHSA-48p4-8xcf-vxj5	<1.10.0-r5
L Insufficiently Protected Credentials	<1.10.0-r4
L GHSA-9hjg-9r4m-mvj7	<1.10.0-r4
L GHSA-43qf-4rqw-9q2g	<1.10.0-r3
L Improper Handling of Case Sensitivity	<1.10.0-r3
L Business Logic Errors	<1.10.0-r3
L GHSA-7rxf-gvfg-47g4	<1.10.0-r3
L GHSA-8vgw-p6qm-5gr7	<1.10.0-r3
L Path Equivalence	<1.10.0-r3
L Function Call With Incorrect Order of Arguments	<1.10.0-r2
L GHSA-4grg-w6v8-c28g	<1.10.0-r2
L Improper Neutralization	<1.9.2-r3
L Protection Mechanism Failure	<1.9.2-r3
L GHSA-q2x7-8rv6-6q7h	<1.9.2-r3
L GHSA-gmj6-6f8f-6699	<1.9.2-r3
H Resource Exhaustion	<1.9.2-r1
L GHSA-q34m-jh98-gwm2	<1.9.2-r1
L Directory Traversal	<1.9.2-r1
L GHSA-f9vj-2wh5-fj8j	<1.9.2-r1
L GHSA-hxwh-jpp2-84pm	<1.9.1-r0
H CVE-2024-6221	<1.9.1-r0
H Insufficient Verification of Data Authenticity	<1.8.0-r10
L GHSA-248v-346w-9cwc	<1.8.0-r10
L CVE-2024-37891	<1.8.0-r9
L GHSA-34jh-p97f-mpxf	<1.8.0-r9
L GHSA-9wx4-h78v-vm56	<1.8.0-r7
L CVE-2024-35195	<1.8.0-r7
L Cross-site Scripting (XSS)	<1.8.0-r7
L GHSA-h75v-3vvj-5mfj	<1.8.0-r7
L CVE-2024-34069	<1.8.0-r7
L GHSA-2g68-c3qc-8985	<1.8.0-r7
L Improper Output Neutralization for Logs	<1.8.0-r7
L GHSA-84pr-m4jr-85g5	<1.8.0-r7
H CVE-2024-3651	<1.8.0-r6
L GHSA-jjg7-2v4v-x38h	<1.8.0-r6
L GHSA-g4mx-q9vg-27p4	<1.8.0-r2
L GHSA-x7m3-jprg-wc5g	<1.7.0-r4
L GHSA-hrfv-mqp8-q5rw	<1.8.0-r2
L GHSA-v845-jxx5-vc9f	<1.7.0-r5
M CVE-2023-45803	<1.8.0-r2
H Out-of-bounds Write	<1.8.0-r2
H CVE-2023-43804	<1.7.0-r5
C CVE-2023-41419	<1.7.0-r4

Vulnerability

Vulnerable Version

<1.10.0-r5

<1.10.0-r5

<1.10.0-r5

<1.10.0-r5

Insufficiently Protected Credentials

<1.10.0-r4