CVE-2026-112940 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://www.suse.com/security/cve/CVE-2026-112940.html

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
registry.suse.com/rancher/rancher-ai-agent:v1.0.3 Rancher AI v1.0.3 Python filelock@3.32.7 4.2.1 HIGH affected
stgregistry.suse.com/rancher/rancher-ai-agent:v1.0.3 Rancher AI v1.0.3 Python filelock@3.32.7 4.2.1 HIGH affected
rancher/rancher-ai-agent:v1.0.2 Rancher Prime v2.13-head Python filelock@3.29.0 4.2.1 HIGH affected
rancher/rancher-ai-agent:v1.0.2 Rancher Prime v2.13.11 Python filelock@3.29.0 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/codeserver-python:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/rstudio-tidyverse:v1.11.0 SUSE AI latest Python filelock@3.29.1 4.2.1 HIGH affected
ghcr.io/kubeflow/trainer/dataset-initializer:v2.3.0 SUSE AI latest Python filelock@3.29.0 4.2.1 HIGH affected
ghcr.io/kubeflow/trainer/mlx-runtime:v2.3.0 SUSE AI latest Python filelock@3.32.2 4.2.1 HIGH affected
ghcr.io/kubeflow/trainer/model-initializer:v2.3.0 SUSE AI latest Python filelock@3.29.0 4.2.1 HIGH affected
kserve/huggingfaceserver:v0.21.0 SUSE AI latest Python filelock@4.0.3 4.2.1 HIGH affected
kserve/sklearnserver:v0.21.0 SUSE AI latest Python filelock@3.29.0 4.2.1 HIGH affected
litellm/litellm-database:v1.106.6 SUSE AI latest Python filelock@3.32.7 4.2.1 HIGH affected
litellm/litellm:v1.106.6 SUSE AI latest Python filelock@3.32.7 4.2.1 HIGH affected
pytorch/pytorch:2.11.0-cuda12.8-cudnn9-runtime SUSE AI latest Python filelock@3.25.2 4.2.1 HIGH affected
ghcr.io/kubeflow/katib/pytorch-mnist-cpu:v0.19.0 SUSE AI latest Python filelock@3.20.0 4.2.1 HIGH not affected version of the dependency not affected
ghcr.io/kubeflow/trainer/torchtune-trainer:v2.3.0 SUSE AI latest Python filelock@3.20.0 4.2.1 HIGH not affected version of the dependency not affected
kserve/huggingfaceserver:v0.21.0-gpu SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected
kserve/lgbserver:v0.21.0 SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected
kserve/paddleserver:v0.21.0 SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected
kserve/pmmlserver:v0.21.0 SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected
kserve/storage-initializer:v0.21.0 SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected
kserve/xgbserver:v0.21.0 SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected
kubeflowkatib/pytorch-mnist-cpu:v0.17.0 SUSE AI latest Python filelock@3.15.4 4.2.1 HIGH not affected version of the dependency not affected
pytorch/torchserve-kfs:0.12.0 SUSE AI latest Python filelock@3.16.1 4.2.1 HIGH not affected version of the dependency not affected
seldonio/mlserver:1.7.1 SUSE AI latest Python filelock@3.18.0 4.2.1 HIGH not affected version of the dependency not affected