Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CGA-gc39-v4hg-hvj7

published 8 months ago

Summary

No summary available.

What to do

Update chainguard kubeflow-centraldashboard to version 1.10.0-r12.
Update wolfi kubeflow-centraldashboard to version 1.10.0-r12.

Affected software

Ecosystem	Vendor	Product	Affected versions
Chainguard	chainguard	kubeflow-centraldashboard	< 1.10.0-r12 Fix: upgrade to 1.10.0-r12
Wolfi	wolfi	kubeflow-centraldashboard	< 1.10.0-r12 Fix: upgrade to 1.10.0-r12

Original advisory text

CGA-gc39-v4hg-hvj7

References

https://github.com/EthanKim88/ethan-cve-disclosures/blob/main/CVE-2025-69873-ajv... URL
https://github.com/ajv-validator/ajv/releases/tag/v6.14.0 URL
https://github.com/advisories/GHSA-2g4f-4pwh-qvx6 Vendor Advisory
https://github.com/ajv-validator/ajv/pull/2588 Patch
https://github.com/ajv-validator/ajv/pull/2590 Patch
https://github.com/github/advisory-database/pull/6991 Patch
https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-69873.json URL
https://access.redhat.com/errata/RHSA-2026:10093 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:13512 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:14774 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:15091 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:16874 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:19712 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26211 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:26214 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:33371 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5168 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5807 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5907 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:5910 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6192 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6277 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6309 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6497 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6567 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6568 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:6802 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7314 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:9742 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-69873 Vendor Advisory
https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/69xxx/CVE-2025-69873... Vendor Advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-69873 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2439070 Third Party Advisory
https://access.redhat.com/errata/RHSA-2026:36651 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40118 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40984 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:40945 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41941 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:41944 Vendor Advisory

Fix within

Internet-facing 60 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit (estimated)
Gives an attacker partial control (estimated)

Severity

2.9 Low

Timeline

Published18 Feb 2026

Updated5 Nov 2026

First seen5 Nov 2026

Sources

CGA-gc39-v4hg-hvj7 · OSV

Track software like this

Free during beta