CVE-2026-55380 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-45HQ-CXWH-F6VC vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-4X4J-2G7C-83W6 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-5X94-69RX-G8H2 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-JJJ6-MW9F-P565 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-VJC4-5QP5-M44J vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-54058 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-54059 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow, jupyter-all-spark-notebook, awx, datahub-ingestion, datahub-ingestion-fips, opal...

GHSA-94P4-4CQ8-9G67 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow, jupyter-all-spark-notebook, awx, datahub-ingestion, datahub-ingestion-fips, opal...

GHSA-FJR4-X663-MWXC vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow, jupyter-all-spark-notebook, awx, datahub-ingestion, datahub-ingestion-fips, opal...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow, jupyter-all-spark-notebook, awx, datahub-ingestion, datahub-ingestion-fips, opal...

GHSA-R9MR-M37C-5FR3 vulnerabilities

Vulnerabilities for packages: mlflow-fips, mlflow, jupyter-all-spark-notebook, awx, datahub-ingestion, datahub-ingestion-fips, opal...

Exploit for Deserialization of Untrusted Data in Lfprojects Mlflow

🚀 SmartHire - Hack The Box Writeup A...

MAL-2026-10779 Malicious code in mlflow-ui (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b7192c53fc1e0b62e2c373a8a6beabfeb3777cae3aacfe23ca374eab1c2839a7 The package impersonates the MLflow project author 'MLflow Community' , homepage https://github.com/mlflow/mlflow but provides no MLflow UI...

Malicious Package

Overview mlflow-ui is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

PYSEC-2026-2659 MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions

MLflow 3.9.0 with basic-auth --app-name basic-auth fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the BEFOREREQUESTHANDLERS dictionary in mlflow/server/auth/init.py does not include entries for ListGatewaySecretInfos, ListGatewayEndpoints, and...