mlflow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-10279Highmlflow: mlflow Creates of Temporary File in Directory with Insecure Permissions CVE-2025-14279Highmlflow: MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation CVE-2025-11200Highmlflow: MLflow Weak Password Requirements Authentication Bypass Vulnerability CVE-2025-11201Highmlflow: MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability CVE-2025-52967Mediummlflow: MLFlow SSRF via gateway_proxy_handler CVE-2025-1473Mediummlflow: MLflow Cross-Site Request Forgery (CSRF) vulnerability CVE-2025-1474Lowmlflow: MLflow has Weak Password Requirements CVE-2025-0453Mediummlflow: MLflow Uncontrolled Resource Consumption vulnerability CVE-2024-8859Highmlflow: MLflow has a Local File Read/Path Traversal in dbfs CVE-2024-6838Mediummlflow: MLflow Uncontrolled Resource Consumption vulnerability CVE-2024-27134Highmlflow: MLflow's excessive directory permissions allow local privilege escalation CVE-2024-2928Highmlflow: Local File Inclusion in mlflow CVE-2024-3099Mediummlflow: Undefined Behavior in mlflow CVE-2024-0520Criticalmlflow: Remote code execution in mlflow CVE-2024-37060Highmlflow: MLFlow unsafe deserialization CVE-2024-37061Highmlflow: MLFlow improper input validation CVE-2024-37058Highmlflow: MLFlow unsafe deserialization CVE-2024-37059Highmlflow: MLFlow unsafe deserialization CVE-2024-37057Highmlflow: MLFlow unsafe deserialization CVE-2024-37054Highmlflow: MLFlow unsafe deserialization CVE-2024-37055Highmlflow: MLFlow unsafe deserialization CVE-2024-37052Highmlflow: MLFlow unsafe deserialization CVE-2024-37056Highmlflow: MLFlow unsafe deserialization CVE-2024-37053Highmlflow: MLFlow unsafe deserialization CVE-2024-3848Highmlflow: MLflow has a Local File Read/Path Traversal bypass

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo