CVE-2024-37054-PoC

MLflow Unsafe Deserialization CVE-2024-37054 Overview This repository documents research into CVE-2024-37054 , an unsafe deserialization issue affecting MLflow PyFunc model handling. In affected MLflow versions, loading an untrusted PyFunc model can cause Python deserialization logic to process a...