Evidence · DiggingBeagle record
Kubeflow Pipelines security advisory GHSA-9gj7-33j5-r3v3
Independent Kubeflow Pipelines authorization or artifact handling disclosure.
- Published
- Oct 29, 2026
- Source role
- primary disclosure
Evidence record
Independent Kubeflow Pipelines authorization or artifact handling disclosure.
Claim-level citations (2)
- supportsKubeflow artifact authorization differed across decoded paths: The Kubeflow advisory reports: Authorization matched one path representation while the storage client normalized another.
Advisory Summary and Proof of Concept
- supportsKubeflow artifact authorization differed across decoded paths: The reported repair is version 2.18.0, with the specific affected component and version range described in the advisory.
Advisory Affected and Patched Versions