CVE-2026-74860 - CVE Scans - 2026-11-13
Last scan: 2026-11-13T01:12:43Z
Go to the main page | Go to CVE index
Advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-74860
The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".
Search:
| Image | Release | Binary/Package | Dependency | Patched version | Severity | Status | Justification (for status not affected) |
|---|---|---|---|---|---|---|---|
| ghcr.io/kubeflow/hub/controller:v0.3.18 | SUSE AI latest | libxml2 | libxml2@2.9.13-14.el9_8.5 | 2.9.13-18.el9_9.1 | HIGH | affected | |
| ghcr.io/kubeflow/hub/server:v0.3.18 | SUSE AI latest | libxml2 | libxml2@2.9.13-14.el9_8.5 | 2.9.13-18.el9_9.1 | HIGH | affected | |
| ghcr.io/kubeflow/hub/storage-initializer:v0.3.18 | SUSE AI latest | libxml2 | libxml2@2.9.13-14.el9_8.5 | 2.9.13-18.el9_9.1 | HIGH | affected | |
| python:3.15.2 | SUSE AI latest | libxml2 | libxml2@2.12.7+dfsg+really2.9.14-2.1+deb13u3 | HIGH | affected | ||
| python:3.15.2 | SUSE AI latest | libxml2-dev | libxml2-dev@2.12.7+dfsg+really2.9.14-2.1+deb13u3 | HIGH | affected | ||
| seldonio/mlserver:1.7.1 | SUSE AI latest | libxml2 | libxml2@2.9.13-9.el9_6 | 2.9.13-18.el9_9.1 | HIGH | affected | |
| ghcr.io/kubeflow/model-registry/controller:v0.3.8 | SUSE AI latest | libxml2 | libxml2@2.9.13-14.el9_7 | 2.9.13-18.el9_9.1 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/model-registry/server:v0.3.8 | SUSE AI latest | libxml2 | libxml2@2.9.13-14.el9_7 | 2.9.13-18.el9_9.1 | HIGH | not affected | vulnerable code not in execute path |
| ghcr.io/kubeflow/model-registry/storage-initializer:v0.3.8 | SUSE AI latest | libxml2 | libxml2@2.9.13-14.el9_7 | 2.9.13-18.el9_9.1 | HIGH | not affected | vulnerable code not in execute path |