9255 matches found
CLSA-2026-1783386117 TuxCare security update for mlflow (1 CVE)
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.22.4.post5+tuxcare...
CLSA-2026-1780879893 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 2.22.4.post3+tuxcare...
CLSA-2026-1780879898 TuxCare security update for 2 packages (1 CVE)
TuxCare rebuilt 2 packages to address 1 CVE. Fixed in 2.22.4.post4+tuxcare...
CLSA-2026-1780879892 TuxCare security update for mlflow (5 CVEs)
TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post4+tuxcare...
CLSA-2026-1780447822 TuxCare security update for mlflow (2 CVEs)
TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post3+tuxcare...
CLSA-2026-1775781174 TuxCare security update for mlflow (14 CVEs)
TuxCare rebuilt mlflow to address 14 CVEs. Fixed in 2.9.1.post2+tuxcare...
CLSA-2026-1775694718 TuxCare security update for 2 packages (4 CVEs)
TuxCare rebuilt 2 packages to address 4 CVEs. Fixed in 2.22.4.post2+tuxcare...
CLSA-2026-1774830249 TuxCare security update for mlflow (5 CVEs)
TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post1+tuxcare...
CLSA-2026-1770768731 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 2.22.4.post1+tuxcare...
PT-2026-74199
TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post1+tuxcare...
PT-2026-74402
TuxCare rebuilt mlflow to address 13 CVEs. Fixed in 2.9.1.post2+tuxcare...
PT-2026-74964
TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post4+tuxcare...
PT-2026-75313
TuxCare rebuilt mlflow to address 1 CVE. Fixed in 2.22.4.post5+tuxcare...
PT-2026-74919
TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post3+tuxcare...
PT-2026-67793
Name of the Vulnerable Software and Affected Versions NVIDIA Triton Inference Server for Linux affected versions not specified Description An issue exists in the Triton MLflow plugin where providing a specific path in the model name allows a user to read, write to, or modify files located outside...
CVE-2026-47487: Improper Limitation of a Pathname to a Restricted Directory
NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...
deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.21.2)
transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...
CVE-2026-54060 vulnerabilities
Vulnerabilities for packages: superset, mlflow, open-webui...