GHSA-G7F3-828F-7H7M vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-PQ5P-34CR-23V9 vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2025-61920 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-G7F3-828F-7H7M vulnerabilities

Vulnerabilities for packages: mlflow...

MLFlow server is exposed to data exfiltration and destruction due to lack of Origin validation

The MLFlow REST server is vulnerable to DNS rebinding attacks, allowing malicious websites to bypass Same-Origin Policy protections and execute unauthorized calls against REST endpoints. Once rebinding is successful, the attacker can: Query for experiments via the 2.0/mlflow/experiments/search...

EUVD-2023-0161

Malicious code in bioql PyPI...

EUVD-2025-6810

Malicious code in bioql PyPI...

EUVD-2024-1934

Malicious code in bioql PyPI...

EUVD-2025-6808

Malicious code in bioql PyPI...

EUVD-2025-6836

Malicious code in bioql PyPI...

EUVD-2025-6960

Malicious code in bioql PyPI...

EUVD-2024-0115

Malicious code in bioql PyPI...

EUVD-2024-1956

Malicious code in bioql PyPI...

EUVD-2024-2125

Malicious code in bioql PyPI...

EUVD-2024-1239

Malicious code in bioql PyPI...

EUVD-2023-2956

Malicious code in bioql PyPI...

EUVD-2023-0156

Malicious code in bioql PyPI...

EUVD-2025-18888

Malicious code in bioql PyPI...

EUVD-2022-0158

Malicious code in bioql PyPI...

EUVD-2023-3301

Malicious code in bioql PyPI...