VYPR

apk package

chainguard/kubeflow-tensorboard-web-app

pkg:apk/chainguard/kubeflow-tensorboard-web-app

Vulnerabilities (3)

  • CVE-2026-69247HigAug 3, 2026
    affected < 1.10.0-r30fixed 1.10.0-r30

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decrypting a RecipientInfo's encryptedKey in several distinguish

  • CVE-2026-59886HigJul 14, 2026
    affected < 1.10.0-r28fixed 1.10.0-r28

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a few bytes long can carry a very large exponent,

  • CVE-2026-59885HigJul 14, 2026
    affected < 1.10.0-r28fixed 1.10.0-r28

    pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted payload containing an OID with many arcs consumes excessive CPU per