CGA-3qv8-5p92-vj49

Published

Last updated

https://images.chainguard.dev/security/CGA-3qv8-5p92-vj49

Package

kubeflow-pipelines

RepositoryWolfi

Latest Update

Pending upstream fix

Aliases

CVE-2025-32997
GHSA-9gqv-wp59-fq42

Severity

Unknown

References

https://nvd.nist.gov/vuln/detail/CVE-2025-32997
https://github.com/advisories/GHSA-9gqv-wp59-fq42

Updates

Status

Pending upstream fix

Impact

There is an open PR upstream regarding the required dependency bump to remediate this CVE seen here: https://github.com/kubeflow/pipelines/pull/11837 However, it is currently failing CI checks and so upstream maintainers will need to implement compatibility.

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

CGA-3qv8-5p92-vj49

Severity

References

Updates

Product

Solutions

Customers

Resources

Company