Lucene search
+L

9 matches found

PyPA
PyPA
•added 2026/07/07 11:45 a.m.•23 views

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS7.7AI score0.00623EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2024-2203

Malicious code in bioql PyPI...

8.8CVSS7.2AI score0.00623EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2024/06/04 12:31 p.m.•61 views

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.8AI score0.00623EPSS
SaveExploits1References3Affected Software1
osv_ghsa
osv_ghsa
•added 2024/06/04 12:31 p.m.•52 views

GHSA-X38X-G6GR-JQFF MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS6.1AI score0.00623EPSS
SaveExploits1References3
NVD
NVD
•added 2024/06/04 12:15 p.m.•36 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.8AI score0.00623EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2024/06/04 12:15 p.m.•21 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS7.5AI score0.00623EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/04 12:00 p.m.•44 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.8AI score0.00623EPSS
SaveExploits1References1
Mend
Mend
•added 2024/06/04 12:00 p.m.•6 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS0.00623EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•4 views

CVE-2024-37055: Deserialization of Untrusted Data

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS7.6AI score0.00623EPSS
SaveExploits1References1
Rows per page
Query Builder