Package
kserve-storage-controller
Component
setuptools
Latest update
6.1
CVSS V3
Build, ship, and run secure software with minimal, hardened container images — rebuilt from source daily and guarded under our industry-leading remediation SLA.
Start for freeStatus
Justification
Impact
GHSA-h35f-9h28-mq5c (CVE-2026-59890) is a source distribution packaging flaw: FileList matches MANIFEST.in exclusion globs byte-for-byte with no Unicode normalization, so on a normalization-preserving filesystem (macOS APFS or HFS+) a file written in NFD is not excluded by an NFC rule and is packed into the source distribution. CVSS AV:L/AC:L/PR:N/UI:R reflects that this requires a local maintainer building and publishing a source distribution.
The vulnerable code path (the setuptools egg_info FileList and the sdist command) is not in the execution path of kserve-storage-controller. The shipped entrypoint, /storage-initializer/scripts/initializer-entrypoint, downloads models from object storage; it never invokes sdist or egg_info, and the image contains no MANIFEST.in and performs no package publishing. Additionally, Linux container filesystems store file names as opaque bytes and are not normalization-preserving, so the NFC/NFD collision the flaw depends on cannot occur even if a source distribution build were invoked.
setuptools cannot be upgraded to 83.0.0 here: the kserve llm extra pins vllm 0.20.0, whose torch 2.11.0 dependency declares an unmarked upper bound of setuptools below 82. uv lock resolves the full extras universe even though only the storage extra is installed, so 83.0.0 is unsatisfiable.
Status