mlflow vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2024-27133Criticalmlflow: MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution CVE-2024-27132Criticalmlflow: Cross-site Scripting in MLFlow CVE-2023-6975Criticalmlflow: MLFlow Path Traversal Vulnerability CVE-2023-6977Highmlflow: MLflow Local File Disclosure Vulnerability CVE-2023-6974Criticalmlflow: MLflow Server-Side Request Forgery (SSRF)CVE-2023-6976Highmlflow: MLflow Path Traversal Vulnerability CVE-2023-6909Highmlflow: MLflow Path Traversal Vulnerability CVE-2023-6940Highmlflow: mlflow Command Injection vulnerability CVE-2023-6831Criticalmlflow: Path traversal in MLflow CVE-2023-6753Highmlflow: Path traversal in MLflow CVE-2023-6709Highmlflow: Jinja2 template injection in mlflow CVE-2023-6568Mediummlflow: Cross-site Scripting (XSS) in MLflow CVE-2023-43472Highmlflow: Information exposure in MLflow CVE-2023-6014Criticalmlflow: MLflow authentication requirement bypass can allow a user to arbitrarily create an account CVE-2023-6018Criticalmlflow: Remote Code Execution due to Full Controled File Write in mlflow CVE-2023-6015Criticalmlflow: MLflow allowed arbitrary files to be PUT onto the server CVE-2023-4033Highmlflow: mlflow vulnerable to OS Command Injection CVE-2023-3765Criticalmlflow: MLflow Path Traversal vulnerability CVE-2023-2780Criticalmlflow: mlflow Path Traversal vulnerability CVE-2023-30172Highmlflow: mflow vulnerable to directory traversal GHSA-83FM-W79M-64R5Criticalmlflow: Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs CVE-2023-2356Highmlflow: Relative path traversal in mlflow CVE-2023-1176Mediummlflow: Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs CVE-2023-1177Criticalmlflow: mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs CVE-2022-0736Highmlflow: Insecure Temporary File in mlflow

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo