9256 matches found
CLSA-2026-1789465756 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post9+tuxcare...
PT-2026-99026
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.9.1.post9+tuxcare...
CVE-2026-76220 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
PYSEC-2026-3865 MLflow AI Gateway permits SSRF through an unvalidated api_base
MLflow's AI Gateway accepts an authconfig.apibase value when creating a gateway secret mlflow/server/handlers.py, creategatewaysecret with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint mlflow/server/gatewayapi.py, rawproxy subsequently issues...
MLflow AI Gateway permits SSRF through an unvalidated api_base
MLflow's AI Gateway accepts an authconfig.apibase value when creating a gateway secret mlflow/server/handlers.py, creategatewaysecret with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint mlflow/server/gatewayapi.py, rawproxy subsequently issues...
azureml-acft-image-components (>=0.0.7, <=0.0.45), azureml-evaluate-mlflow (>=0.0.0, <=0.0.91) +8 more potentially affected by CVE-2026-71211 via mlflow (>=3.14.0, <=3.15.2)
mlflow PYPI version =3.14.0, =0.0.7, =0.0.0, =0.9.1, =0.6.0, =0.2.9, =1.4.0, =1.0.9, =1.0.7, =1.0.12 Source cves: CVE-2026-71211 Source advisory: OSV:PYSEC-2026-3865...
auto-deep-learning (>=0.1.5.1, <=0.1.5.4), autogluon-multimodal (>=0.6.3b20230121, <=0.6.3b20230203) +50 more potentially affected by CVE-2026-9856 via transformers (4.25.1)
transformers PYPI version 4.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - auto-deep-learning =0.1.5.1, =0.6.3b20230121, =0.0.1, =0.0.1, =2.3.0, =0.1.3, =0.0.1rc5, =0.0.7, =0.0.1, =1.12.0rc1, =0.12.0, =0.12.1 -...
CVE-2026-67322 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, mlflow-fips, opal, datahub-ingestion, mlflow...
CVE-2026-67323 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, opal, datahub-ingestion, mlflow...
CVE-2026-67325 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, opal, datahub-ingestion, mlflow...
GHSA-4VPG-PFJ8-M33Q vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, opal, datahub-ingestion, mlflow...
GHSA-6R2R-WW24-7H52 vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, opal, datahub-ingestion, mlflow...
GHSA-M4F3-G4CQ-HQRX vulnerabilities
Vulnerabilities for packages: awx, datahub-ingestion-fips, checkov, mlflow-fips, opal, datahub-ingestion, mlflow...
GHSA-M4F3-G4CQ-HQRX vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
CVE-2026-76219 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
GHSA-W672-239G-C3GR vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
CVE-2026-67323 vulnerabilities
Vulnerabilities for packages: checkov, mlflow...
GHSA-4VPG-PFJ8-M33Q vulnerabilities
Vulnerabilities for packages: checkov, mlflow...