Live · 98 sources · updated 24m ago
The Security Standard

A daily wire for defenders: vulnerabilities, advisories, research, standards.

Section

Vulnerabilities

CVE records from NVD, ZDI advisories and the CISA KEV catalog, with CVSS, EPSS, SSVC and exploitation state.

Clear

3 matching records, 1 with confirmed exploitation.

  1. CVE NVD

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0, get_current_user in gpustack/api/auth.py treated a loopback request source as the built-in administrator when…

    Exploited CVSS 9.8 Fix available CVE-2026-102895 Gpustack
  2. CVE NVD

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 0.7.1 until 2.2.2, the /auth/saml/callback endpoint decoded SAML XML, used its NameID and attributes to resolve or provision…

    CVSS 9.1 Fix available CVE-2026-102894 Gpustack
  3. CVE NVD

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning.

    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. From 2.2.0 until 2.2.2, cluster_apiserver_proxy forwarded an authenticated non-administrator's requests to a selected Kubernetes…

    CVSS 8.8 Fix available CVE-2026-103002 Gpustack Developer platform

Reuse this view

Same filters as JSON: /api/items?category=vuln&window=30d&vendor=Gpustack&limit=100. RSS for this section: feed.xml.

Keyboard

j / k
Next / previous item
o or Enter
Open the original source
i
Open the item page
s
Save or unsave for later
/
Focus search
g then f v a r n s
Go to front, vulnerabilities, advisories, research, news, standards
t
Toggle theme
?
This help