Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
kserve-rest-proxy may let attackers bypass security controls
published 7 months ago
Summary
The kserve-rest-proxy component in version 0.12.0 has several weaknesses that could let a malicious user bypass protections and potentially access or alter data. These problems are fixed in newer releases (0.12.0‑r1, r2, etc.). Update to the latest version of kserve-rest-proxy as soon as possible to remove the risk.
What to do
- Update cleanstart kserve-rest-proxy to version 0.12.0-r2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kserve-rest-proxy |
< 0.12.0-r2 Fix: upgrade to 0.12.0-r2
|
Original advisory text
Security fixes for CVE-2025-47911, CVE-2025-58190, CVE-2025-68121, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-33186, ghsa-qxp5-gwg8-xv66, ghsa-vvgc-356p-c3xw applied in versions: 0.12.0-r0, 0.12.0-r1, 0.12.0-r2
Multiple security vulnerabilities affect the kserve-rest-proxy package. These issues are resolved in later releases. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2025-47911 URL
- https://osv.dev/vulnerability/CVE-2025-58190 URL
- https://osv.dev/vulnerability/CVE-2025-68121 URL
- https://osv.dev/vulnerability/CVE-2026-25679 URL
- https://osv.dev/vulnerability/CVE-2026-27139 URL
- https://osv.dev/vulnerability/CVE-2026-27142 URL
- https://osv.dev/vulnerability/CVE-2026-33186 URL
- https://osv.dev/vulnerability/ghsa-qxp5-gwg8-xv66 URL
- https://osv.dev/vulnerability/ghsa-vvgc-356p-c3xw URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-47911 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-58190 URL
- https://nvd.nist.gov/vuln/detail/CVE-2025-68121 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-25679 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27139 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27142 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-33186 URL
Timeline
Published1 Apr 2026
Updated18 Sep 2026
First seen18 Sep 2026
Sources
CLEANSTART-2026-HK71313 · OSV
Track software like this
Free during beta