CVE-2026-59205 vulnerabilities

Vulnerabilities for packages: superset, mlflow, open-webui...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-5X94-69RX-G8H2 vulnerabilities

Vulnerabilities for packages: superset, mlflow, open-webui...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-6R8X-57C9-28J4 vulnerabilities

Vulnerabilities for packages: superset, mlflow, open-webui...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: superset, mlflow, open-webui...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: superset, mlflow, open-webui...

CVE-2026-54059 vulnerabilities

Vulnerabilities for packages: superset, mlflow, open-webui...

Mlflow - Unauthenticated Access Detection

Unauthenticated Access to MLflow dashboard. !/usr/bin/env python3 -- coding: utf-8 -- """Unauthenticated Access to MLflow dashboard.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Mlflow - Unauthenticated Access...

MLFlow < 2.8.1 - Sensitive Information Disclosure Detection

An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API. !/usr/bin/env python3 -- coding: utf-8 -- """An issue in MLFlow versions 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient clas...

MLflow Absolute Path Traversal Detection

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. !/usr/bin/env python3 -- coding: utf-8 -- """Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner,...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow, jupyter-all-spark-notebook, datahub-ingestion, opal, datahub-ingestion-fips, mlflow-fips, awx...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: mlflow, jupyter-all-spark-notebook, datahub-ingestion, opal, datahub-ingestion-fips, mlflow-fips, awx...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: mlflow, jupyter-all-spark-notebook, datahub-ingestion, opal, datahub-ingestion-fips, mlflow-fips, awx...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow, jupyter-all-spark-notebook, datahub-ingestion, opal, datahub-ingestion-fips, mlflow-fips, awx...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: mlflow, jupyter-all-spark-notebook, datahub-ingestion, opal, datahub-ingestion-fips, mlflow-fips, awx...

Exploit for Deserialization of Untrusted Data in Lfprojects Mlflow

🚀 SmartHire - Hack The Box Writeup A...

MAL-2026-10779 Malicious code in mlflow-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...