EUVD-2023-0162

Malicious code in bioql PyPI...

EUVD-2024-2087

Malicious code in bioql PyPI...

EUVD-2024-2030

Malicious code in bioql PyPI...

EUVD-2024-2029

Malicious code in bioql PyPI...

EUVD-2024-2055

Malicious code in bioql PyPI...

EUVD-2024-2191

Malicious code in bioql PyPI...

EUVD-2024-2203

Malicious code in bioql PyPI...

EUVD-2024-1907

Malicious code in bioql PyPI...

EUVD-2024-1966

Malicious code in bioql PyPI...

EUVD-2024-0114

Malicious code in bioql PyPI...

EUVD-2024-0494

Malicious code in bioql PyPI...

EUVD-2024-0533

Malicious code in bioql PyPI...

EUVD-2023-0160

Malicious code in bioql PyPI...

EUVD-2024-1979

Malicious code in bioql PyPI...

PT-2025-40607

Name of the Vulnerable Software and Affected Versions MLflow affected versions not specified Description MLflow is susceptible to an authentication bypass due to weak password requirements. An attacker could potentially bypass authentication and gain unauthorized access. Recommendations At the...

PT-2025-40608

Name of the Vulnerable Software and Affected Versions MLflow Tracking Server affected versions not specified Description A directory traversal issue exists in the MLflow Tracking Server related to model creation. This allows for remote code execution. The issue involves the ability to traverse...

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper...

MLflow Weak Password Requirements Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from weak password requirements. An attacker can...

CVE-2025-59420 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow...

GHSA-9GGR-2464-2J32 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow...