[ Vendor · 2 CVEs ]
data-infra
CVEs affecting data-infra published in the last 30 days, plus any data-infra CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-111671 | 16 Oct 2026 | CVSS 7.1 | data-infra cube-studioCube-studio through 2026.09.01 contains an insecure direct object reference vulnerability that allows authenticated users to stop, reset, clear or… | |
| CVE-2026-111672 | 16 Oct 2026 | CVSS 4.3 | data-infra cube-studioCube-studio through 2026.09.01 contains a missing authorization vulnerability in myapp/views/view_pipeline.py that allows authenticated users to view… |