Kubeflow Pipelines: Pipeline archive upload allows decompression bomb to exhaust server memory
Go github.com/kubeflow/pipelines · Upgrade to 0.0.0-20260831164314-ba9ae72cc860 (pre-release); some affected versions have no fix yet · < 0.0.0-20260831164314-ba9ae72cc860; >= 1.7.0-alpha.3, <= 1.7.0-alpha.3 · CVE-2026-118761 · GHSA-8fmv-6rg5-5924 · amended