Ecosystem	Package	Version

Vulnerabilities

sonatype-2025-007380

sonatype-2025-007380

kserve - Plaintext Storage of a Password

Published Dec 2, 2025

https://github.com/kserve/kserve/pull/4677

CVSS ScoreHigh

7.1

Ecosystem	Package	Version


golang	github.com/kserve/kserve	v0.14.0-rc1
golang	github.com/kserve/kserve	v0.14.0
golang	github.com/kserve/kserve	v0.14.1
golang	github.com/kserve/kserve	v0.15.0-rc0
golang	github.com/kserve/kserve	v0.15.0-rc1
golang	github.com/kserve/kserve	v0.15.0
golang	github.com/kserve/kserve	v0.15.1
golang	github.com/kserve/kserve	v0.15.2
pypi	kserve	0.10.0
pypi	kserve	0.10.0rc0
pypi	kserve	0.10.0rc1
pypi	kserve	0.10.1.1
pypi	kserve	0.10.1
pypi	kserve	0.10.2
pypi	kserve	0.11.0
pypi	kserve	0.11.0rc0
pypi	kserve	0.11.0rc1
pypi	kserve	0.11.1
pypi	kserve	0.11.2
pypi	kserve	0.12.0
pypi	kserve	0.12.0rc0
pypi	kserve	0.12.0rc1
pypi	kserve	0.12.1
pypi	kserve	0.13.0
pypi	kserve	0.13.0rc0
pypi	kserve	0.13.0rc1
pypi	kserve	0.13.1
pypi	kserve	0.14.0
pypi	kserve	0.14.0rc0
pypi	kserve	0.14.0rc1
pypi	kserve	0.14.1
pypi	kserve	0.15.0
pypi	kserve	0.15.0rc0
pypi	kserve	0.15.0rc1
pypi	kserve	0.15.1
pypi	kserve	0.15.2
pypi	kserve	0.7.0
pypi	kserve	0.7.0rc0
pypi	kserve	0.8.0.1
pypi	kserve	0.8.0.1rc0
pypi	kserve	0.8.0.2
pypi	kserve	0.8.0
pypi	kserve	0.8.0rc0
pypi	kserve	0.9.0
pypi	kserve	0.9.0rc0

sonatype-2025-007380 | Components Impacted | Sonatype Guide | Sonatype Guide