gpustack
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| GPUStack: Missing authorization on several cluster and resource endpoints allows cross-user access and cluster takeover | gpustack | PyPI | High | Fix reported | |
| GPUStack: SAML callback trusts an unverified SAMLResponse, allowing authentication bypass and account takeover | gpustack | PyPI | Critical | Fix reported | |
| GPUStack: Authentication bypass via trusted loopback source (reverse-proxy TCP peer or X-GPUStack-Real-IP header) grants unauthenticated admin | gpustack | PyPI | Critical | Fix reported |