Threats tagged 'ghsa-cr6h-6g58-pq2g'

A vulnerability in ml-metadata's statically-linked gRPC stack allows an in-cluster attacker with network access to the MLMD pod to cause a denial of service by sending specially crafted HTTP/2 requests. This flaw exploits outdated components vulnerable to known HTTP/2 DoS issues, potentially crashing the MLMD pod and disrupting pipeline runs in the affected namespace.