GHSA-JP82-JPQV-5VV3 vulnerabilities

Vulnerabilities for packages: kserve, airflow, semgrep, mlflow...

CVE-2026-54273 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54280 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-63HW-FMQ6-XXG2 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-HPJ7-WQ8M-9HGP vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-XCGM-R5H9-7989 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54276 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-4FVR-RGM6-GQMC vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54274 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54275 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54277 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54278 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54282 vulnerabilities

Vulnerabilities for packages: kserve, airflow, semgrep, mlflow...

GHSA-9X8Q-7H8H-WCW9 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

GHSA-G3CQ-J2XW-WF74 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-54283 vulnerabilities

Vulnerabilities for packages: kserve, airflow, semgrep, mlflow...

GHSA-2FQR-MR3J-6WP8 vulnerabilities

Vulnerabilities for packages: open-webui, airflow, mlflow...

CVE-2026-3198

A flaw was found in MLflow. When configured with basic authentication, MLflow fails to enforce proper authorization checks for several Gateway API list endpoints. This oversight allows any authenticated user, regardless of their assigned permissions, to enumerate sensitive information such as...

CVE-2026-10803

A flaw was found in MLflow. This vulnerability stems from the use of a weak hash algorithm within the Dataset Digest Computation component. A local attacker could potentially exploit this weakness, which may impact the integrity or authenticity of data. Exploitation is considered difficult due to...

CVE-2026-2393

A flaw was found in MLflow. An authenticated attacker can exploit a Server-Side Request Forgery SSRF vulnerability by providing an unvalidated URL parameter to the createwebhook function. This allows the MLflow backend to be forced into sending HTTP requests to internal services, cloud metadata...