CVE-2026-74860 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-74860

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
ghcr.io/kubeflow/hub/controller:v0.3.18 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_8.5 2.9.13-18.el9_9.1 HIGH affected
ghcr.io/kubeflow/hub/server:v0.3.18 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_8.5 2.9.13-18.el9_9.1 HIGH affected
ghcr.io/kubeflow/hub/storage-initializer:v0.3.18 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_8.5 2.9.13-18.el9_9.1 HIGH affected
python:3.15.2 SUSE AI latest libxml2 libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 HIGH affected
python:3.15.2 SUSE AI latest libxml2-dev libxml2-dev@2.12.7+dfsg+really2.9.14-2.1+deb13u3 HIGH affected
seldonio/mlserver:1.7.1 SUSE AI latest libxml2 libxml2@2.9.13-9.el9_6 2.9.13-18.el9_9.1 HIGH affected
ghcr.io/kubeflow/model-registry/controller:v0.3.8 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_7 2.9.13-18.el9_9.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/model-registry/server:v0.3.8 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_7 2.9.13-18.el9_9.1 HIGH not affected vulnerable code not in execute path
ghcr.io/kubeflow/model-registry/storage-initializer:v0.3.8 SUSE AI latest libxml2 libxml2@2.9.13-14.el9_7 2.9.13-18.el9_9.1 HIGH not affected vulnerable code not in execute path