Kserve modelmesh: Security fixes for ghsa-389x-839f-4rhx, ghsa-3p8m-j85q-pgmj, ghsa-4cx2-fc23-5wg6, ghsa-4g8c-wm8x-jfhw, ghsa-735f-pc8j-v9w8, ghsa-fghv-69vj-qj49, ghsa-prj3-ccx8-p6x4
Affects kserve-modelmeshSource GCVE Database
Rated by Threat Radar
- Patch
- Available – fixed in 0.12.0-r16
Data as of 9 Sep 2026, 13:47 UTC
What to do
Upgrade kserve-modelmesh to 0.12.0-r16.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| CleanStartkserve-modelmesh | Affected
| Fixed in
|
Check your own hosts for these packages with threat-finder (opens in a new tab), our free open-source scanner.
AI-suggested
A patch is available for these vulnerabilities. Users should upgrade from version 0.12.0-r16 to a later, fixed release of kserve-modelmesh to remediate the security issues. Since the product is not a cloud service, remediation depends on applying the vendor's fixed versions. No additional mitigation guidance is provided.
Description
Multiple security vulnerabilities have been identified in the kserve-modelmesh package version 0.12.0-r16. These vulnerabilities have been addressed in later releases. No specific technical details or CVSS scores are provided for the individual issues. No known exploits are reported in the wild. Users of the affected version should upgrade to a fixed release to mitigate these vulnerabilities.
References
- github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QG74410.json (opens in a new tab)
- osv.dev/vulnerability/ghsa-389x-839f-4rhx (opens in a new tab)
- osv.dev/vulnerability/ghsa-3p8m-j85q-pgmj (opens in a new tab)
- osv.dev/vulnerability/ghsa-4cx2-fc23-5wg6 (opens in a new tab)
- osv.dev/vulnerability/ghsa-4g8c-wm8x-jfhw (opens in a new tab)
- osv.dev/vulnerability/ghsa-735f-pc8j-v9w8 (opens in a new tab)
- osv.dev/vulnerability/ghsa-fghv-69vj-qj49 (opens in a new tab)
- osv.dev/vulnerability/ghsa-prj3-ccx8-p6x4 (opens in a new tab)
- osv.dev/vulnerability/ghsa-xq3w-v528-46rv (opens in a new tab)