CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-6R8X-57C9-28J4 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

CVE-2026-59197 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

CVE-2026-55379 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-FJ7V-R99M-22GQ vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

CVE-2026-54059 vulnerabilities

Vulnerabilities for packages: mlflow, superset...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: datahub-ingestion, jupyter-all-spark-notebook, awx, mlflow-fips, datahub-ingestion-fips, mlflow, opal...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: datahub-ingestion, jupyter-all-spark-notebook, awx, mlflow-fips, datahub-ingestion-fips, mlflow, opal...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, jupyter-all-spark-notebook, awx, mlflow-fips, datahub-ingestion-fips, mlflow, opal...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, jupyter-all-spark-notebook, awx, mlflow-fips, datahub-ingestion-fips, mlflow, opal...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: datahub-ingestion, jupyter-all-spark-notebook, awx, mlflow-fips, datahub-ingestion-fips, mlflow, opal...

MAL-2026-10779 Malicious code in mlflow-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...

PYSEC-2026-2659 MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

MLflow 3.9.0 with basic-auth --app-name basic-auth fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the BEFOREREQUESTHANDLERS dictionary in mlflow/server/auth/init.py does not include entries for ListGatewaySecretInfos, ListGatewayEndpoints, and...