1280 matches found
CVE-2026-13484
CVE-2026-13484 affects MLflow, specifically the Experiment-scoped Label Schema CRUD API. The vulnerability arises from missing authorization in a function within this API, enabling remote exploitation with high impact to confidentiality, integrity, and availability. Exploitation is described as h...
EUVD-2026-39984
A vulnerability has been found in MLflow up to 4666cffc7912ea606d592fc38d6a75e2935f65e7. The impacted element is an unknown function of the component Experiment-scoped Label Schema CRUD API. Such manipulation leads to missing authorization. It is possible to launch the attack remotely. A high...
PT-2026-53097
Name of the Vulnerable Software and Affected Versions MLflow versions up to 4666cffc7912ea606d592fc38d6a75e2935f65e7 Description An issue exists within the Experiment-scoped Label Schema CRUD API where a function lacks proper authorization. This allows a remote attacker to perform unauthorized...
GHSA-82W8-QH3P-5JFQ vulnerabilities
Vulnerabilities for packages: semgrep, airflow, mlflow, kserve...
CVE-2026-54279 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-JP82-JPQV-5VV3 vulnerabilities
Vulnerabilities for packages: semgrep, airflow, mlflow, kserve...
GHSA-4M7W-QMGQ-4WJ5 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
CVE-2026-54273 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
CVE-2026-54276 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
CVE-2026-54280 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-4FVR-RGM6-GQMC vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-HPJ7-WQ8M-9HGP vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-XCGM-R5H9-7989 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-63HW-FMQ6-XXG2 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
CVE-2026-54282 vulnerabilities
Vulnerabilities for packages: semgrep, airflow, mlflow, kserve...
CVE-2026-54277 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-2FQR-MR3J-6WP8 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...
GHSA-9X8Q-7H8H-WCW9 vulnerabilities
Vulnerabilities for packages: open-webui, airflow, mlflow...