Data

Tools

Indexes

Applications

Experiments

Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

pypi

mlflow

pypi

MLflow is an open source platform for the complete machine learning lifecycle

View on github.com · View on pypi.org

Security Advisories for mlflow in pypi

Moderate
4 months ago

MLFlow SSRF via gateway_proxy_handler GSA_kwCzR0hTQS13eGo3LTNmeDUtcHA5bc4ABJW7

pypi mlflow
Low
7 months ago

MLflow has Weak Password Requirements GSA_kwCzR0hTQS00cmoyLTlnY3gtNXFoeM4ABFvl

pypi mlflow
Moderate
7 months ago

MLflow Cross-Site Request Forgery (CSRF) vulnerability GSA_kwCzR0hTQS05Njl3LWdxcXItZzZqM84ABFv4

pypi mlflow
Moderate
7 months ago

MLflow Uncontrolled Resource Consumption vulnerability GSA_kwCzR0hTQS00OW02LXZycjktMmNxbc4ABFvt

pypi mlflow
High
7 months ago

MLflow has a Local File Read/Path Traversal in dbfs GSA_kwCzR0hTQS00cnFmLThwZm0tcDM2cs4ABFs3

pypi mlflow
Moderate
7 months ago

MLflow Uncontrolled Resource Consumption vulnerability GSA_kwCzR0hTQS1xM2d3LTgyMzYtNWp3NM4ABFsO

pypi mlflow
High
11 months ago

MLflow's excessive directory permissions allow local privilege escalation GSA_kwCzR0hTQS1xcGdjLXc0bWctNnY5Ms4ABBvR

pypi mlflow
Moderate
over 1 year ago

Undefined Behavior in mlflow GSA_kwCzR0hTQS04ZjhxLXEyajctN2oybc4AA8w-

pypi mlflow
High
over 1 year ago

Local File Inclusion in mlflow GSA_kwCzR0hTQS1qNDZxLTVweHgtOHZtd84AA8xl

pypi mlflow
Critical
over 1 year ago

Remote code execution in mlflow GSA_kwCzR0hTQS01cTZjLWZmdmcteGNtOc4AA8xf

pypi mlflow
High
over 1 year ago

MLFlow improper input validation GSA_kwCzR0hTQS1wcWN2LXF3MnItcjg1Oc4AA8rt

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS1jdjZjLTc5NjMtd3hjZ84AA8rv

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS1qOG1nLXBxYzUteDlnas4AA8rn

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS1jd2dnLXc2bXAtdzloZ84AA8rp

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS13ZjdmLThmeGYteGZ4Y84AA8ro

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS00M2M0LTlxZ2oteDc0Ms4AA8re

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS14Mzh4LWc2Z3ItanFmZs4AA8rl

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS03cDhqLXF2NngtZjRnNM4AA8rh

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS03NmNnLWNmaHgtMzczZs4AA8rk

pypi mlflow
High
over 1 year ago

MLFlow unsafe deserialization GSA_kwCzR0hTQS1naHY2LTlyOWotd2g0as4AA8rm

pypi mlflow
High
over 1 year ago

MLflow has a Local File Read/Path Traversal bypass GSA_kwCzR0hTQS1yZnFxLXdxNnctNzJqbc4AA8J7

pypi mlflow
Moderate
over 1 year ago

MLflow allows low privilege users to delete any artifact GSA_kwCzR0hTQS1wNGp4LXE2MnAteDVqcs4AA8J5

pypi mlflow
Critical
over 1 year ago

mlflow vulnerable to Path Traversal GSA_kwCzR0hTQS1ocTg4LXdnN3EtZ3A0Z84AA7CC

pypi mlflow
High
over 1 year ago

mlflow vulnerable to Path Traversal GSA_kwCzR0hTQS01bXZqLXdtZ2otN3E4Y84AA7CR

pypi mlflow
High
over 1 year ago

mlflow vulnerable to Path Traversal GSA_kwCzR0hTQS1mNDJtLW12ZnYtY2d3Nc4AA7B7

pypi mlflow
High
over 1 year ago

mlflow vulnerable to Path Traversal GSA_kwCzR0hTQS1qNjJyLXd4cXEtZjNnZs4AA7B4

pypi mlflow
High
over 1 year ago

mlflow vulnerable to Path Traversal GSA_kwCzR0hTQS1tNDljLTVjNTItNjY5Ns4AA7B8

pypi mlflow
High
over 1 year ago

mlflow Path Traversal vulnerability GSA_kwCzR0hTQS1mODJyLWpqNXItNmc5N84AA7CM

pypi mlflow
Critical
over 1 year ago

MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution GSA_kwCzR0hTQS0zdjc5LXE3cGgtajc1aM4AA5e3

pypi mlflow
Critical
over 1 year ago

Cross-site Scripting in MLFlow GSA_kwCzR0hTQS02NzQ5LW01Y3AtNmNnN84AA5e2

pypi mlflow
Critical
almost 2 years ago

MLflow Server-Side Request Forgery (SSRF) GSA_kwCzR0hTQS01OXYzLTg5OHItcXdoas4AA37g

pypi mlflow
High
almost 2 years ago

MLflow Path Traversal Vulnerability GSA_kwCzR0hTQS13djhxLTRmODUtMnA4cM4AA37f

pypi mlflow
High
almost 2 years ago

MLflow Local File Disclosure Vulnerability GSA_kwCzR0hTQS1xZzhwLTMyZ3ItZ2g2eM4AA37h

pypi mlflow
Critical
almost 2 years ago

MLFlow Path Traversal Vulnerability GSA_kwCzR0hTQS1oaDhwLXA4bXAtZ3Fobc4AA37i

pypi mlflow
High
almost 2 years ago

MLflow Path Traversal Vulnerability GSA_kwCzR0hTQS01cjNxLTkzcTMtZjk3OM4AA37c

pypi mlflow
High
almost 2 years ago

mlflow Command Injection vulnerability GSA_kwCzR0hTQS1odmM2LTQydmYtamhmOM4AA35I

pypi mlflow
Critical
almost 2 years ago

Path traversal in MLflow GSA_kwCzR0hTQS01NTR3LXhoNGotOHc2NM4AA3yh

pypi mlflow
High
almost 2 years ago

Path traversal in MLflow GSA_kwCzR0hTQS12OTQ1LXIzcmMtNmZqbc4AA3ti

pypi mlflow
High
almost 2 years ago

Jinja2 template injection in mlflow GSA_kwCzR0hTQS1jeGZyLTVxM3ItMnJjMs4AA3r7

pypi mlflow
Moderate
almost 2 years ago

Cross-site Scripting (XSS) in MLflow GSA_kwCzR0hTQS12d2hmLTN2Nngtd2ZmOM4AA3mS

pypi mlflow
High
almost 2 years ago

Information exposure in MLflow GSA_kwCzR0hTQS13cXhmLTQ0N20tNmY1Zs4AA3kN

pypi mlflow
Critical
almost 2 years ago

MLflow authentication requirement bypass can allow a user to arbitrarily create an account GSA_kwCzR0hTQS00cXE1LW14eHgtbTZnZ84AA3Oh

pypi mlflow
Critical
almost 2 years ago

MLflow allowed arbitrary files to be PUT onto the server GSA_kwCzR0hTQS1mNzk4LXFtNHItMjNyNc4AA3ON

pypi mlflow
Critical
almost 2 years ago

Remote Code Execution due to Full Controled File Write in mlflow GSA_kwCzR0hTQS01cDNoLTdmd2gtOTJyY84AA3OR

pypi mlflow
High
about 2 years ago

mlflow vulnerable to OS Command Injection GSA_kwCzR0hTQS1mZnczLTYzNzgtY3FncM4AA0-f

pypi mlflow
Critical
over 2 years ago

MLflow Path Traversal vulnerability GSA_kwCzR0hTQS1mbXhqLTZoOWctNnZ3M84AA0y8

pypi mlflow
Critical
over 2 years ago

mlflow Path Traversal vulnerability GSA_kwCzR0hTQS13anEzLTdqeHgtd2hqOc4AAzYV

pypi mlflow
High
over 2 years ago

mflow vulnerable to directory traversal GSA_kwCzR0hTQS13YzZqLTVnODMteGZtNs4AAzRj

pypi mlflow
Critical
over 2 years ago

Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs GSA_kwCzR0hTQS04M2ZtLXc3OW0tNjRyNc4AAzCj

pypi mlflow
High
over 2 years ago

Relative path traversal in mlflow GSA_kwCzR0hTQS14NDIyLTZxaHYtcDI5Z84AAzAd

pypi mlflow
Moderate
over 2 years ago

Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs GSA_kwCzR0hTQS13cDcyLTdoajktNTI2Nc4AAyUI

pypi mlflow
Critical
over 2 years ago

mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs GSA_kwCzR0hTQS14ZzczLTk0ZnAtZzQ0Oc4AAyUH

pypi mlflow
High
over 3 years ago

Insecure Temporary File in mlflow GSA_kwCzR0hTQS12cWoyLTR2OG0tOHZycc0uPQ

pypi mlflow

Filter by Severity

High 30 Critical 14 Moderate 8 Low 1