kserve | Snyk

Direct Vulnerabilities

Known vulnerabilities in the kserve package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Information Exposure	<0.19.0-r5
L GHSA-g6cj-pr64-35w5	<0.19.0-r5
L GHSA-cq5v-8q36-5273	<0.19.0-r5
L GHSA-mq44-7p77-q5h7	<0.19.0-r5
L GHSA-hrxh-6v49-42gf	<0.19.0-r5
L GHSA-m4p7-r5rc-7g4j	<0.19.0-r5
L GHSA-hm4w-wwcw-mr6r	<0.19.0-r5
L HTTP Request Smuggling	<0.19.0-r5
L Out-of-bounds Read	<0.19.0-r5
L Resource Exhaustion	<0.19.0-r5
L GHSA-mfx4-hv73-q22v	<0.19.0-r5
L GHSA-8ppf-4f7h-5ppj	<0.19.0-r5
L Resource Exhaustion	<0.19.0-r5
L Improper Input Validation	<0.19.0-r5
L Resource Exhaustion	<0.19.0-r5
L GHSA-5wrp-cwcj-q835	<0.19.0-r4
L Uncontrolled Memory Allocation	<0.19.0-r4
L GHSA-ff52-ph69-cf7x	<0.19.0-r3
L CVE-2026-42505	<0.19.0-r3
L GHSA-fhv5-28vv-h8m8	<0.19.0-r2
L Resource Exhaustion	<0.19.0-r2
L GHSA-jq35-7prp-9v3f	<0.19.0-r2
L Improper Cleanup on Thrown Exception	<0.19.0-r2
L GHSA-993g-76c3-p5m4	<0.19.0-r2
L GHSA-w7vc-732c-9m39	<0.19.0-r2
L Unintended Proxy or Intermediary ('Confused Deputy')	<0.19.0-r2
L Improper Authentication	<0.19.0-r2
L GHSA-xgmm-8j9v-c9wx	<0.19.0-r2
L Improper Verification of Cryptographic Signature	<0.19.0-r2
L GHSA-537c-gmf6-5ccf	<0.19.0-r1
L CVE-2026-42507	<0.18.0-r5
L GHSA-h3gm-q7m7-mp28	<0.18.0-r5
L GHSA-4279-q6mj-392r	<0.18.0-r5
L CVE-2026-27145	<0.18.0-r5
L GHSA-65pc-fj4g-8rjx	<0.18.0-r4
L GHSA-897w-fcg9-f6xj	<0.18.0-r4
M Inefficient Regular Expression Complexity	<0.18.0-r4
L Directory Traversal	<0.18.0-r4
L GHSA-9277-mp7x-85jf	<0.18.0-r4
L OS Command Injection	<0.18.0-r4
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.18.0-r3
L Uncontrolled Memory Allocation	<0.18.0-r1
L GHSA-w8rr-5gcm-pp58	<0.18.0-r1
L Allocation of Resources Without Limits or Throttling	<0.18.0-r1
L GHSA-mh2q-q3fh-2475	<0.18.0-r1
L GHSA-54jq-c3m8-4m76	<0.17.0-r2
L HTTP Response Splitting	<0.17.0-r2
L GHSA-6jhg-hg63-jvvf	<0.17.0-r2
L GHSA-hcc4-c3v8-rx92	<0.17.0-r2
L GHSA-966j-vmvw-g2g9	<0.17.0-r2
H Loop with Unreachable Exit Condition ('Infinite Loop')	<0.17.0-r2
L Improper Handling of Highly Compressed Data (Data Amplification)	<0.17.0-r2
L GHSA-w2fm-2cpv-w7v5	<0.17.0-r2
H Directory Traversal	<0.17.0-r2
L GHSA-fh55-r93g-j68g	<0.17.0-r2
L GHSA-69f9-5gxw-wvc2	<0.17.0-r2
M Logging of Excessive Data	<0.17.0-r2
L GHSA-p998-jp59-783m	<0.17.0-r2
L GHSA-6mq8-rvhq-8wgg	<0.17.0-r2
M HTTP Request Smuggling	<0.17.0-r2
L GHSA-63hf-3vf5-4wqf	<0.17.0-r2
M Allocation of Resources Without Limits or Throttling	<0.17.0-r2
M HTTP Request Smuggling	<0.17.0-r2
L Allocation of Resources Without Limits or Throttling	<0.17.0-r2
H Allocation of Resources Without Limits or Throttling	<0.17.0-r2
L GHSA-c427-h43c-vf67	<0.17.0-r2
L Resource Exhaustion	<0.17.0-r2
L GHSA-mqqc-3gqh-h2x8	<0.17.0-r2
L GHSA-mwh4-6h8g-pg8w	<0.17.0-r2
M Allocation of Resources Without Limits or Throttling	<0.17.0-r2
L GHSA-mj87-hwqh-73pj	<0.17.0-r2
M Directory Traversal	<0.17.0-r2
H Allocation of Resources Without Limits or Throttling	<0.17.0-r2
L GHSA-jj3x-wxrx-4x23	<0.17.0-r2
M Information Exposure	<0.17.0-r2
L GHSA-m5qp-6w8w-w647	<0.17.0-r2
L Resource Exhaustion	<0.17.0-r2
L GHSA-mf9w-mj56-hr94	<0.17.0-r2
L GHSA-2vrm-gr82-f7m5	<0.17.0-r2
L GHSA-g84x-mcqj-x9qq	<0.17.0-r2
L Link Following	<0.17.0-r2
M HTTP Response Splitting	<0.17.0-r2
L GHSA-3wq7-rqq7-wx6j	<0.17.0-r2
M Improper Input Validation	<0.17.0-r2
M HTTP Response Splitting	<0.17.0-r2
L Uncaught Exception	<0.17.0-r1
L GHSA-78h2-9frx-2jm8	<0.17.0-r1
L GHSA-p423-j2cm-9vmq	<0.16.0-r25
C Out-of-Bounds	<0.16.0-r25
H Untrusted Search Path	<0.16.0-r25
L GHSA-hfvc-g4fc-pqhx	<0.16.0-r25
L Resource Exhaustion	<0.16.0-r24
M Insecure Temporary File	<0.16.0-r24
L GHSA-m959-cc7f-wv43	<0.16.0-r24
L GHSA-gc5v-m9x4-r6x2	<0.16.0-r24
M Improper Certificate Validation	<0.16.0-r24
L GHSA-5239-wwwm-4pmq	<0.16.0-r24
L GHSA-p77j-4mvh-x3m3	<0.16.0-r23
L Improper Authorization	<0.16.0-r23
H Directory Traversal	<0.16.0-r22
L GHSA-3936-cmfr-pm3m	<0.16.0-r22
L GHSA-752w-5fwx-jx9f	<0.16.0-r22
L Insufficient Verification of Data Authenticity	<0.16.0-r22
L Direct Request ('Forced Browsing')	<0.16.0-r15
L GHSA-j3gx-2473-5fp8	<0.16.0-r15
L GHSA-j4j7-vw47-rhfq	<0.16.0-r15
L GHSA-rv83-g57w-fr8j	<0.16.0-r15
L Directory Traversal	<0.16.0-r15
L Cross-site Scripting (XSS)	<0.16.0-r15
H Deserialization of Untrusted Data	<0.16.0-r9
L GHSA-7f5h-v6xp-fcq8	<0.16.0-r5
H Improper Handling of Highly Compressed Data (Data Amplification)	<0.16.0-r6
L Untrusted Search Path	<0.16.0-r14
H Allocation of Resources Without Limits or Throttling	<0.16.0-r6
L Allocation of Resources Without Limits or Throttling	<0.16.0-r4
M CVE-2026-26007	<0.16.0-r13
L Allocation of Resources Without Limits or Throttling	<0.16.0-r9
L GHSA-hcg3-q754-cr77	<0.14.1-r6
L GHSA-78wr-2p64-hpwj	<0.14.0-r0
L CVE-2025-22870	<0.14.1-r7
L Resource Exhaustion	<0.14.0-r0
H Improper Handling of Highly Compressed Data (Data Amplification)	<0.16.0-r8
L GHSA-jm66-cg57-jjv5	<0.16.0-r9
L GHSA-2xpw-w6gg-jr37	<0.16.0-r6
L GHSA-gm62-xv2j-4w53	<0.16.0-r6
L Improper Certificate Validation	<0.16.0-r2
L GHSA-c4p6-qg4m-9jmr	<0.16.0-r7
L GHSA-9h8m-3fm2-qjrq	<0.16.0-r14
L GHSA-7c64-f9jr-v9h2	<0.16.0-r2
L GHSA-f6x5-jh6r-wrfv	<0.16.0-r1
L CVE-2025-58181	<0.16.0-r1
L GHSA-38jv-5279-wg99	<0.16.0-r8
L GHSA-j5w8-q4qc-rx2x	<0.16.0-r1
L GHSA-qxp5-gwg8-xv66	<0.14.1-r7
L CVE-2024-45341	<0.14.1-r2
L GHSA-8rrh-rw8j-w5fx	<0.16.0-r11
H Improper Neutralization	<0.14.1-r0
L HTTP Request Smuggling	<0.16.0-r5
L CVE-2025-22868	<0.14.1-r5
L GHSA-pq67-6m6q-mj2v	<0.16.0-r6
L CVE-2024-45337	<0.14.0-r0
L GHSA-2c2j-9gv5-cj73	<0.16.0-r5
L CVE-2024-34156	<0.13.1-r5
L GHSA-3whm-j4xm-rv8x	<0.14.1-r2
L GHSA-8qvm-5x2c-j2w7	<0.15.2-r2
L GHSA-7wrw-r4p8-38rx	<0.14.1-r2
L CVE-2024-12797	<0.14.1-r3
L Protection Mechanism Failure	<0.14.1-r0
L GHSA-5rjg-fvgr-3xxf	<0.16.0-r6
L GHSA-cfpf-hrx2-8rv6	<0.16.0-r4
L GHSA-q2x7-8rv6-6q7h	<0.14.1-r0
M Open Redirect	<0.16.0-r6
L GHSA-7gcm-g887-7qv7	<0.16.0-r10
L CVE-2025-22866	<0.14.1-r2
L CVE-2024-57000	<0.14.1-r2
L GHSA-gmj6-6f8f-6699	<0.14.1-r0
L GHSA-58pv-8j8x-9vj2	<0.16.0-r11
L GHSA-j7vj-rw65-4v26	<0.13.1-r5
L GHSA-h355-32pf-p2xm	<0.16.0-r12
H CVE-2026-0994	<0.16.0-r10
L GHSA-vqfr-h8mv-ghfj	<0.16.0-r5
L GHSA-w32m-9786-jp63	<0.14.0-r3
L Directory Traversal	<0.16.0-r7
L GHSA-r6ph-v2qm-q3c2	<0.16.0-r13
M Directory Traversal	<0.16.0-r11
M CVE-2025-4565	<0.15.2-r2
L CVE-2025-47914	<0.16.0-r1
L CVE-2024-45336	<0.14.1-r2
L GHSA-xg2h-7cxj-3gvh	<0.14.1-r2
H CVE-2024-52304	<0.14.0-r0
L GHSA-63vm-454h-vhhq	<0.16.0-r9
L Directory Traversal	<0.16.0-r11
L GHSA-crqm-pwhx-j97f	<0.13.1-r5
L GHSA-8jvr-vh7g-f8gx	<0.16.0-r12
L GHSA-8xfx-rj4p-23jm	<0.13.1-r5
H Directory Traversal	<0.16.0-r6
L GHSA-8495-4g3g-x7pr	<0.14.0-r0
L Allocation of Resources Without Limits or Throttling	<0.16.0-r5
M Open Redirect	<0.16.0-r6
L GHSA-48p4-8xcf-vxj5	<0.16.0-r6
L CVE-2025-61732	<0.16.0-r12
L GHSA-w853-jp5j-5j7f	<0.16.0-r7
C CVE-2025-68121	<0.16.0-r12
L CVE-2025-22869	<0.14.1-r6
L GHSA-hx9q-6w63-j58v	<0.16.0-r11
L CVE-2024-45338	<0.14.0-r3
L CVE-2024-34155	<0.13.1-r5
L GHSA-6v2p-p543-phr9	<0.14.1-r5
L Algorithmic Complexity	<0.16.0-r5
L CVE-2024-34158	<0.13.1-r5
L GHSA-79v4-65xg-pq4g	<0.14.1-r3
M Link Following	<0.16.0-r7
L GHSA-3f6r-qh9c-x6mm	<0.14.1-r2
L CVE-2025-67221	<0.16.0-r11
L GHSA-v778-237x-gjrc	<0.14.0-r0
L CVE-2024-30251	<0.13.1-r3
H Inefficient Regular Expression Complexity	<0.13.1-r3
L CVE-2024-27306	<0.13.1-r3
M CVE-2024-42367	<0.13.1-r3

Vulnerability

Vulnerable Version

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

HTTP Request Smuggling

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

<0.19.0-r5

Improper Input Validation

<0.19.0-r5

Resource Exhaustion

<0.19.0-r5

GHSA-5wrp-cwcj-q835

<0.19.0-r4

Uncontrolled Memory Allocation

<0.19.0-r4

<0.19.0-r3

<0.19.0-r3

<0.19.0-r2

<0.19.0-r2

<0.19.0-r2

Improper Cleanup on Thrown Exception

<0.19.0-r2

GHSA-993g-76c3-p5m4

<0.19.0-r2

GHSA-w7vc-732c-9m39

<0.19.0-r2

Unintended Proxy or Intermediary ('Confused Deputy')

<0.19.0-r2

Improper Authentication

<0.19.0-r2

GHSA-xgmm-8j9v-c9wx

<0.19.0-r2

Improper Verification of Cryptographic Signature

<0.19.0-r2

<0.19.0-r1

<0.18.0-r5

<0.18.0-r5

<0.18.0-r5

<0.18.0-r5

<0.18.0-r4

<0.18.0-r4

Inefficient Regular Expression Complexity

<0.18.0-r4

Directory Traversal

<0.18.0-r4

GHSA-9277-mp7x-85jf

<0.18.0-r4

OS Command Injection

<0.18.0-r4

Loop with Unreachable Exit Condition ('Infinite Loop')

<0.18.0-r3

Uncontrolled Memory Allocation

<0.18.0-r1

GHSA-w8rr-5gcm-pp58

<0.18.0-r1

Allocation of Resources Without Limits or Throttling

<0.18.0-r1

GHSA-mh2q-q3fh-2475

<0.18.0-r1

GHSA-54jq-c3m8-4m76

<0.17.0-r2

HTTP Response Splitting

<0.17.0-r2

GHSA-6jhg-hg63-jvvf

<0.17.0-r2

GHSA-hcc4-c3v8-rx92

<0.17.0-r2

GHSA-966j-vmvw-g2g9

<0.17.0-r2

Loop with Unreachable Exit Condition ('Infinite Loop')

<0.17.0-r2

Improper Handling of Highly Compressed Data (Data Amplification)

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

Logging of Excessive Data

<0.17.0-r2

GHSA-p998-jp59-783m

<0.17.0-r2

GHSA-6mq8-rvhq-8wgg

<0.17.0-r2

HTTP Request Smuggling

<0.17.0-r2

GHSA-63hf-3vf5-4wqf

<0.17.0-r2

Allocation of Resources Without Limits or Throttling

<0.17.0-r2

HTTP Request Smuggling

<0.17.0-r2

Allocation of Resources Without Limits or Throttling

<0.17.0-r2

Allocation of Resources Without Limits or Throttling

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

Allocation of Resources Without Limits or Throttling

<0.17.0-r2

GHSA-mj87-hwqh-73pj

<0.17.0-r2

Directory Traversal

<0.17.0-r2

Allocation of Resources Without Limits or Throttling

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

<0.17.0-r2

HTTP Response Splitting

<0.17.0-r2

GHSA-3wq7-rqq7-wx6j

<0.17.0-r2

Improper Input Validation

<0.17.0-r2

HTTP Response Splitting

<0.17.0-r2

<0.17.0-r1

<0.17.0-r1

<0.16.0-r25

<0.16.0-r25

Untrusted Search Path

<0.16.0-r25

GHSA-hfvc-g4fc-pqhx

<0.16.0-r25

Resource Exhaustion

<0.16.0-r24

Insecure Temporary File

<0.16.0-r24

GHSA-m959-cc7f-wv43

<0.16.0-r24

GHSA-gc5v-m9x4-r6x2

<0.16.0-r24

Improper Certificate Validation

<0.16.0-r24

GHSA-5239-wwwm-4pmq

<0.16.0-r24

GHSA-p77j-4mvh-x3m3

<0.16.0-r23

Improper Authorization

<0.16.0-r23

Directory Traversal

<0.16.0-r22

GHSA-3936-cmfr-pm3m

<0.16.0-r22

GHSA-752w-5fwx-jx9f

<0.16.0-r22

Insufficient Verification of Data Authenticity

<0.16.0-r22

Direct Request ('Forced Browsing')

<0.16.0-r15

<0.16.0-r15

<0.16.0-r15

<0.16.0-r15

<0.16.0-r15

Cross-site Scripting (XSS)

<0.16.0-r15

Deserialization of Untrusted Data

<0.16.0-r9

GHSA-7f5h-v6xp-fcq8

<0.16.0-r5

Improper Handling of Highly Compressed Data (Data Amplification)

<0.16.0-r6

Untrusted Search Path

<0.16.0-r14

Allocation of Resources Without Limits or Throttling

<0.16.0-r6

Allocation of Resources Without Limits or Throttling

<0.16.0-r4

CVE-2026-26007

<0.16.0-r13

Allocation of Resources Without Limits or Throttling

<0.16.0-r9

<0.14.1-r6

<0.14.0-r0

<0.14.1-r7

<0.14.0-r0

Improper Handling of Highly Compressed Data (Data Amplification)

<0.16.0-r8

GHSA-jm66-cg57-jjv5

<0.16.0-r9

GHSA-2xpw-w6gg-jr37

<0.16.0-r6

GHSA-gm62-xv2j-4w53

<0.16.0-r6

Improper Certificate Validation

<0.16.0-r2

<0.16.0-r7

<0.16.0-r14

<0.16.0-r2

<0.16.0-r1

<0.16.0-r1

<0.16.0-r8

<0.16.0-r1

<0.14.1-r7

<0.14.1-r2

<0.16.0-r11

Improper Neutralization

<0.14.1-r0

HTTP Request Smuggling

<0.16.0-r5

<0.14.1-r5

<0.16.0-r6

<0.14.0-r0

<0.16.0-r5

<0.13.1-r5

<0.14.1-r2

<0.15.2-r2

<0.14.1-r2

<0.14.1-r3

Protection Mechanism Failure

<0.14.1-r0

<0.16.0-r6

<0.16.0-r4

<0.14.1-r0

<0.16.0-r6

<0.16.0-r10

<0.14.1-r2

<0.14.1-r2

<0.14.1-r0

<0.16.0-r11

<0.13.1-r5

<0.16.0-r12

<0.16.0-r10

<0.16.0-r5

<0.14.0-r3

<0.16.0-r7

<0.16.0-r13

<0.16.0-r11

<0.15.2-r2

<0.16.0-r1

<0.14.1-r2

<0.14.1-r2

<0.14.0-r0

<0.16.0-r9

<0.16.0-r11

<0.13.1-r5

<0.16.0-r12

<0.13.1-r5

<0.16.0-r6

<0.14.0-r0

Allocation of Resources Without Limits or Throttling

<0.16.0-r5

<0.16.0-r6

<0.16.0-r6

<0.16.0-r12

<0.16.0-r7

<0.16.0-r12

<0.14.1-r6

<0.16.0-r11

<0.14.0-r3

<0.13.1-r5

<0.14.1-r5

Algorithmic Complexity

<0.16.0-r5

<0.13.1-r5

<0.14.1-r3

<0.16.0-r7

<0.14.1-r2

<0.16.0-r11

<0.14.0-r0

<0.13.1-r3

Inefficient Regular Expression Complexity

<0.13.1-r3

CVE-2024-27306

<0.13.1-r3

CVE-2024-42367

<0.13.1-r3