9244 matches found
auto-mlflow (1.5.0), databricks-genai (>=1.2.0a23, <=1.2.0a24) +2 more potentially affected by CVE-2026-64849 via mlflow (2.20.3)
mlflow PYPI version 2.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auto-mlflow 1.5.0 - databricks-genai =1.2.0a23, =0.1.0, =0.99.9, =0.99.9.post1 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
SummaryThe default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...
azureml-contrib-run (>=1.0.33, <=1.0.41), azureml-mlflow (1.0.41) potentially affected by CVE-2026-64849 via mlflow (0.9.1)
mlflow PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.33, =1.0.41 - azureml-mlflow 1.0.41 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
autorad (>=0.2.2, <=0.2.5), katonic (>=1.3.0, <=1.6.0) potentially affected by CVE-2026-64849 via mlflow (1.23.1)
mlflow PYPI version 1.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autorad =0.2.2, =1.3.0, =1.6.0 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
nerblackbox (>=0.0.11, <=0.0.13), qacaller (>=0.0.1, <=0.1.2) potentially affected by CVE-2026-64849 via mlflow (1.8.0)
mlflow PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - nerblackbox =0.0.11, =0.0.1, =0.1.2 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
PYSEC-2026-3687 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
Summary The default MLflow Tracking Server mlflow server, no authentication, default SQLite backend exposes the model-registry webhooks API unauthenticated, including a synchronous POST /api/2.0/mlflow/webhooks/id/test endpoint that returns the upstream response status and body to the caller. The...
llm-foundry (>=0.9.1, <=0.10.0), mlflow-pytorch-exp (0.0.1) potentially affected by CVE-2026-64849 via mlflow (2.14.3)
mlflow PYPI version 2.14.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry =0.9.1, =0.10.0 - mlflow-pytorch-exp 0.0.1 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2026-64849 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
triggerflow (0.3.3) potentially affected by CVE-2026-64849 via mlflow (2.21.0)
mlflow PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - triggerflow 0.3.3 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
MLflow: trace API endpoints lack proper authorization validators
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...
abnativ (>=1.1.0, <=1.2.9), ai-24sea (>=0.1.0, <=1.1.0) +218 more potentially affected by CVE-2026-8147 via mlflow (>=2.14.0, <=3.12.0)
mlflow PYPI version =2.14.0, =1.1.0, =0.1.0, =1.0.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.9, =0.1.40 and more Source cves: CVE-2026-8147 Source advisory: OSV:PYSEC-2026-3686...
PYSEC-2026-3686 MLflow: trace API endpoints lack proper authorization validators
In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying trac...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: mlflow-fips, openstack-horizon-2025.1, openstack-keystone-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, airflow-postgres-fips, airflow-core, netbox, openstack-glance-2026.1-fips, openstack-horizon-2026.1, airflow,...
CVE-2026-54284 vulnerabilities
Vulnerabilities for packages: airflow, mlflow, mycli...
CVE-2026-59893 vulnerabilities
Vulnerabilities for packages: airflow, mlflow, mycli...
CVE-2026-71491 vulnerabilities
Vulnerabilities for packages: airflow, mlflow, mycli...
GHSA-F2FF-P2WW-7P4P vulnerabilities
Vulnerabilities for packages: airflow, mlflow, mycli...
GHSA-PRG7-HCFM-MFCR vulnerabilities
Vulnerabilities for packages: airflow, mlflow, mycli...