GHSA-6R8X-57C9-28J4 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-FJ7V-R99M-22GQ vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-VJC4-5QP5-M44J vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

GHSA-XJ96-63GP-2GMR vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

CVE-2026-59198 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

CVE-2026-54059 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: open-webui, mlflow, superset...

Mlflow - Unauthenticated Access Detection

Unauthenticated Access to MLflow dashboard. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated Access to MLflow dashboard.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mlflow - Unauthenticated Access...

MLFlow < 2.8.1 - Sensitive Information Disclosure Detection

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in MLFlow versions 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

MLflow Absolute Path Traversal Detection

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. !/usr/bin/env python3 -- coding: utf-8 -- """Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, mlflow, opal, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, mlflow, opal, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, mlflow, opal, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, mlflow, opal, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: jupyter-all-spark-notebook, mlflow, opal, mlflow-fips, datahub-ingestion, datahub-ingestion-fips, awx...

Exploit for Deserialization of Untrusted Data in Lfprojects Mlflow

🚀 SmartHire - Hack The Box Writeup A...

MAL-2026-10779 Malicious code in mlflow-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...