GHSA-PQ5P-34CR-23V9 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-G7F3-828F-7H7M vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2025-61920 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-PQ5P-34CR-23V9 vulnerabilities

Vulnerabilities for packages: mlflow...

CVE-2025-61920 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-G7F3-828F-7H7M vulnerabilities

Vulnerabilities for packages: mlflow...

MLFlow server is exposed to data exfiltration and destruction due to lack of Origin validation

The MLFlow REST server is vulnerable to DNS rebinding attacks, allowing malicious websites to bypass Same-Origin Policy protections and execute unauthorized calls against REST endpoints. Once rebinding is successful, the attacker can: Query for experiments via the 2.0/mlflow/experiments/search...

EUVD-2024-2125

Malicious code in bioql PyPI...

EUVD-2024-1239

Malicious code in bioql PyPI...

EUVD-2024-0115

Malicious code in bioql PyPI...

EUVD-2024-0494

Malicious code in bioql PyPI...

EUVD-2025-6836

Malicious code in bioql PyPI...

EUVD-2025-18888

Malicious code in bioql PyPI...

EUVD-2024-1956

Malicious code in bioql PyPI...

EUVD-2024-2030

Malicious code in bioql PyPI...

EUVD-2024-1966

Malicious code in bioql PyPI...

EUVD-2024-1979

Malicious code in bioql PyPI...

EUVD-2024-2087

Malicious code in bioql PyPI...

EUVD-2024-1907

Malicious code in bioql PyPI...

EUVD-2024-2203

Malicious code in bioql PyPI...