Lucene search
+L

1 matches found

OSV
OSV
added 2026/07/07 11:45 a.m.4 views

PYSEC-2026-1643 MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS6.3AI score0.00618EPSS
SaveExploits1References5
Rows per page
Query Builder