CVE-2026-102278 - CVE Scans - 2026-11-13
Last scan: 2026-11-13T01:12:43Z
Go to the main page | Go to CVE index
Advisory: https://www.suse.com/security/cve/CVE-2026-102278.html
The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".
Search:
| Image | Release | Binary/Package | Dependency | Patched version | Severity | Status | Justification (for status not affected) |
|---|---|---|---|---|---|---|---|
| ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 | SUSE AI latest | Node.js | brace-expansion@2.0.2 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 | SUSE AI latest | Node.js | brace-expansion@2.0.2 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 | SUSE AI latest | Node.js | brace-expansion@2.0.2 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 | SUSE AI latest | Node.js | brace-expansion@2.0.2 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | affected | |
| ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 | SUSE AI latest | Node.js | brace-expansion@2.0.2 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | affected | |
| ghcr.io/kubeflow/dashboard/dashboard:v2.0.0 | SUSE AI latest | Node.js | brace-expansion@1.1.11 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/dashboard/dashboard:v2.0.0 | SUSE AI latest | Node.js | brace-expansion@2.0.1 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/kubeflow/central-dashboard:v1.10.0 | SUSE AI latest | Node.js | brace-expansion@1.1.11 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/kubeflow/central-dashboard:v1.10.0 | SUSE AI latest | Node.js | brace-expansion@2.0.1 | 5.0.11, 3.0.8, 2.1.6, 1.1.20 | HIGH | not affected | vulnerable code not in execute path |