Lucene search
+L

8 matches found

PyPA
PyPA
•added 2026/07/07 11:45 a.m.•19 views

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS6.3AI score0.00623EPSS
SaveExploits1References5Affected Software1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•15 views

EUVD-2024-2203

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00623EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2024/06/04 12:31 p.m.•55 views

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.8AI score0.00623EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/06/04 12:31 p.m.•49 views

GHSA-X38X-G6GR-JQFF MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS6.1AI score0.00623EPSS
SaveExploits1References3
OSV
OSV
•added 2024/06/04 12:15 p.m.•17 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS7.5AI score0.00623EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/04 12:15 p.m.•33 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.8AI score0.00623EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/04 12:00 p.m.•38 views

CVE-2024-37055

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS8.8AI score0.00623EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/04 12:00 a.m.•0 views

CVE-2024-37055: Deserialization of Untrusted Data

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS7.6AI score0.00623EPSS
SaveExploits1References1
Rows per page
Query Builder