Deserialization of Untrusted Data

Overview mlrun is a Tracking and config of machine learning runs Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the importfunctiontodict function in the run.py file. Details Serialization is a process of converting an object into a sequence of bytes whic...

Directory Traversal

Overview mlrun is a Tracking and config of machine learning runs Affected versions of this package are vulnerable to Directory Traversal in the getlogsizelegacy function in api/crud/logs.py. This allows attackers to access locations on the filesystem outside the project directory. Details A...

MLRun Detection

A MLRun Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208131; scriptversion"1.6";...