Images CVE Scans

GHSA-6v7p-g79w-8964 - CVE Scans - 2026-11-13

Last scan: 2026-11-13T01:12:43Z

Go to the main page | Go to CVE index

Advisory: https://github.com/advisories/GHSA-6v7p-g79w-8964

The images that have the vulnerable dependency in a version that isn't affected by this CVE (not vulnerable or fixed) are listed as "not affected".

Search:

Image Release Binary/Package Dependency Patched version Severity Status Justification (for status not affected)
ghcr.io/kubeflow/kubeflow/notebook-servers/codeserver-python:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-cuda-full:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-pytorch-full:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-scipy:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-cuda-full:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/jupyter-tensorflow-full:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/kubeflow/notebook-servers/rstudio-tidyverse:v1.11.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/trainer/dataset-initializer:v2.3.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/trainer/mlx-runtime:v2.3.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/trainer/model-initializer:v2.3.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
ghcr.io/kubeflow/trainer/torchtune-trainer:v2.3.0 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
kserve/huggingfaceserver:v0.21.0-gpu SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
python:3.15.2 SUSE AI latest Python msgpack@1.1.2 1.2.1 HIGH affected
pytorch/torchserve-kfs:0.12.0 SUSE AI latest Python msgpack@1.1.0 1.2.1 HIGH affected