1234 matches found
GHSA-PQCV-QW2R-R859 MLFlow improper input validation
Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLproject to execute arbitrary code on an end user’s system when run due to unfiltered input...
GHSA-PQCV-QW2R-R859 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-PQCV-QW2R-R859 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-43C4-9QGJ-X742 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-76CG-CFHX-373F vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-7P8J-QV6X-F4G4 vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-X38X-G6GR-JQFF vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-7P8J-QV6X-F4G4 MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run arbitrary code on an end user’s system when interacted with...
GHSA-GHV6-9R9J-WH4J vulnerabilities
Vulnerabilities for packages: mlflow...
GHSA-X38X-G6GR-JQFF MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...
a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +145 more potentially affected by CVE-2024-37052 via mlflow (>=1.20.0 <=2.14.1)
mlflow PYPI version =1.20.0, =0.1.0, =0.0.5, =0.1.2, =1.0.72, =0.0.1, =1.0.72.1, =0.2.5, =0.1.3, =0.1.0, =0.2.0, =0.3.5, =0.8.0, =1.0.0 and more Source cves: CVE-2024-37052 Source advisory: OSV:GHSA-76CG-CFHX-373F...
a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +169 more potentially affected by CVE-2024-37054 via mlflow (>=0.9.0 <=2.14.1)
mlflow PYPI version =0.9.0, =0.1.0, =0.0.5, =0.1.2, =1.0.23, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =0.1.3, =3.0.0, =0.1.0, =0.2.0, =0.3.5, =0.3.8 and more Source cves: CVE-2024-37054 Source advisory: OSV:GHSA-GHV6-9R9J-WH4J...
a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +145 more potentially affected by CVE-2024-37053 via mlflow (>=1.20.0 <=2.14.1)
mlflow PYPI version =1.20.0, =0.1.0, =0.0.5, =0.1.2, =1.0.72, =0.0.1, =1.0.72.1, =0.2.5, =0.1.3, =0.1.0, =0.2.0, =0.3.5, =0.8.0, =1.0.0 and more Source cves: CVE-2024-37053 Source advisory: OSV:GHSA-43C4-9QGJ-X742...
a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +132 more potentially affected by CVE-2024-37056 via mlflow (>=1.23.0 <=2.14.1)
mlflow PYPI version =1.23.0, =0.1.0, =0.0.5, =0.1.2, =1.0.72, =0.0.1, =1.0.72.1, =0.2.5, =0.1.3, =0.1.0, =0.2.0, =0.3.5, =0.8.0, =1.2.0, =1.9.30 and more Source cves: CVE-2024-37056 Source advisory: OSV:GHSA-7P8J-QV6X-F4G4...
a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +131 more potentially affected by CVE-2024-37055 via mlflow (>=1.24.0 <=2.14.1)
mlflow PYPI version =1.24.0, =0.1.0, =0.0.5, =1.0.72, =0.0.1, =1.0.72.1, =0.2.5, =0.1.3, =0.1.0, =0.2.0, =0.3.5, =0.8.0, =1.2.0, =1.9.30 and more Source cves: CVE-2024-37055 Source advisory: OSV:GHSA-X38X-G6GR-JQFF...
GHSA-76CG-CFHX-373F MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...
GHSA-43C4-9QGJ-X742 MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...
GHSA-GHV6-9R9J-WH4J MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with...
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...
MLFlow unsafe deserialization
Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run arbitrary code on an end user’s system when interacted with...