Cpe:2.3:a:kubeflow:model_registry:*:*:*:*:*:*:*:*

Kubeflow Model Registry versions up to 0.3.17 contain a server-side request forgery vulnerability allowing namespace users to exfiltrate ServiceAccount tokens and gain cluster-wide privileges.