mlflow (PyPI)
Advisories
170
Latest version
—
License
—
OpenSSF Scorecard
—
How to fix
Upgrading to 3.17.2 or later clears every advisory below that has a fix.
Upgrade commands
pip
pip install --upgrade "mlflow>=3.17.2"poetry
poetry add "mlflow>=3.17.2"uv
uv add "mlflow>=3.17.2"Known vulnerabilities
| Advisory | Severity | Affected | Fixed in |
|---|---|---|---|
| GHSA-26p8-2jq9-3vq9 MLflow vulnerable to remote code execution on unauthenticated servers via third-party scorer deserialization importing caller-placed artifact modules |
Critical EPSS 0.70% |
>= 3.12.0rc0, < 3.17.0 | 3.17.0 |
| GHSA-j7qq-vr8c-xvw3 MLflow CrewAI autologging records LLM provider API keys in logged trace spans |
Medium EPSS 0.21% |
>= 2.19.0, < 3.17.0 | 3.17.0 |
| GHSA-m65p-9j7q-6w33 MLflow vulnerable to arbitrary file read on unauthenticated servers via prompt model version source |
High EPSS 0.56% |
>= 3.10.0, < 3.17.0 | 3.17.0 |
| GHSA-2wqp-q3c6-ccj5 MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints |
Medium EPSS 0.68% |
>= 3.12.0rc0, < 3.17.0 | 3.17.0 |
| GHSA-wqmh-qccw-pqwf MLflow FileStore trace IDs allow path traversal and arbitrary file writes |
High EPSS 0.60% |
< 3.17.2 | 3.17.2 |
| GHSA-gqvg-gmmx-x4hm MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact |
High | >= 2.1.0, < 3.15.0 | 3.15.0 |
| GHSA-7gwp-5pfp-969j MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) Known exploited |
Critical EPSS 10.02% |
>= 3.3.0, < 3.15.0 | 3.15.0 |
| GHSA-7gwp-5pfp-969j MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) Known exploited |
Critical EPSS 10.02% |
< 3.15.0 | 3.15.0 |
| GHSA-7gwp-5pfp-969j MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) Known exploited |
Critical EPSS 10.02% |
>= 3.3.0, < 3.15.0 | 3.15.0 |
| GHSA-h7x2-h6g9-p789 MLflow AI Gateway permits SSRF through an unvalidated api_base |
High EPSS 0.29% |
>= 3.13.0, <= 3.15.2 | No fix yet |
| GHSA-h7x2-h6g9-p789 MLflow AI Gateway permits SSRF through an unvalidated api_base |
High EPSS 0.29% |
>= 3.13.0, <= 3.15.2 | No fix yet |
| GHSA-2cm6-r77w-6g96 MLflow: trace API endpoints lack proper authorization validators |
High EPSS 0.55% |
>= 2.14.0rc0, < 3.13.0rc0 | 3.13.0rc0 |
| GHSA-2cm6-r77w-6g96 MLflow: trace API endpoints lack proper authorization validators |
High EPSS 0.55% |
>= 2.14.0rc0, < 3.13.0rc0 | 3.13.0rc0 |
| GHSA-5qmp-p3c4-72qj MLflow: Deterministic sampling in dataset digest enables predictable collisions |
Low EPSS 0.10% |
< 3.10.1 | 3.10.1 |
| GHSA-5qmp-p3c4-72qj MLflow: Deterministic sampling in dataset digest enables predictable collisions |
Low EPSS 0.10% |
< 3.10.1 | 3.10.1 |
| GHSA-g35p-px32-whv6 MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration |
High EPSS 0.52% |
< 3.11.0 | 3.11.0 |
| GHSA-g35p-px32-whv6 MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration |
High EPSS 0.52% |
< 3.11.0 | 3.11.0 |
| GHSA-r5m9-wm49-959f MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions |
Medium EPSS 0.24% |
< 3.11.0rc0 | 3.11.0rc0 |
| GHSA-r5m9-wm49-959f MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions |
Medium EPSS 0.24% |
< 3.11.0rc0 | 3.11.0rc0 |
| GHSA-8c7q-86fq-vvmh MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled |
Critical EPSS 0.34% |
< 3.10.0 | 3.10.0 |
| GHSA-8c7q-86fq-vvmh MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled |
Critical EPSS 0.34% |
< 3.11.0rc0 | 3.11.0rc0 |
| GHSA-w5xq-c4pf-ghq7 MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks |
Medium EPSS 0.44% |
< 3.10.0 | 3.10.0 |
| GHSA-w5xq-c4pf-ghq7 MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks |
Medium EPSS 0.44% |
< 3.10.0 | 3.10.0 |
| GHSA-67c5-x5mf-rppq MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution |
Critical EPSS 0.38% |
>= 3.9.0, < 3.10.0 | 3.10.0 |
| GHSA-67c5-x5mf-rppq MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution |
Critical EPSS 0.38% |
>= 3.9.0, < 3.10.0 | 3.10.0 |
| GHSA-f2m9-wcf4-cwwx MLFlow Creates a Temporary File With Insecure Permissions |
High EPSS 0.19% |
< 3.11.0 | 3.11.0 |
| GHSA-f2m9-wcf4-cwwx MLFlow Creates a Temporary File With Insecure Permissions |
High EPSS 0.19% |
>= 1.26.0, < 3.11.0 | 3.11.0 |
| GHSA-75cm-x2w3-8mgf MLflow: unauthenticated access to certain FastAPI routes |
High EPSS 20.78% |
< 3.11.0 | 3.11.0 |
| GHSA-75cm-x2w3-8mgf MLflow: unauthenticated access to certain FastAPI routes |
High EPSS 20.78% |
< 3.10.0 | 3.10.0 |
| GHSA-42h5-h8qh-vv9v MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem |
High EPSS 3.69% |
< 3.10.0 | 3.10.0 |
| GHSA-42h5-h8qh-vv9v MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem |
High EPSS 3.69% |
< 3.10.0 | 3.10.0 |
| GHSA-65h7-c7c4-mghx MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability |
High EPSS 0.29% |
< 3.9.0 | 3.9.0 |
| GHSA-65h7-c7c4-mghx MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability |
High EPSS 0.29% |
< 3.9.0 | 3.9.0 |
| GHSA-46r5-x6jq-v8g6 MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint |
Medium EPSS 0.36% |
< 3.11.0rc0 | 3.11.0rc0 |
| GHSA-46r5-x6jq-v8g6 MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint |
Medium EPSS 0.36% |
< 3.11.0rc0 | 3.11.0rc0 |
| GHSA-fh64-r2vc-xvhr MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface |
Medium EPSS 0.22% |
< 3.11.0rc0 | 3.11.0rc0 |
| GHSA-fh64-r2vc-xvhr MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface |
Medium EPSS 0.22% |
< 3.11.1 | 3.11.1 |
| GHSA-7qhf-v65m-g5f3 mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization |
Critical EPSS 4.39% |
<= 3.10.1 | No fix yet |
| GHSA-7qhf-v65m-g5f3 mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization |
Critical EPSS 4.39% |
<= 3.10.1 | No fix yet |
| GHSA-rvhj-8chj-8v3c Mlflow: Command Injection when serving models with enable_mlserver=True |
High EPSS 1.39% |
< 3.9.0 | 3.9.0 |
| GHSA-rvhj-8chj-8v3c Mlflow: Command Injection when serving models with enable_mlserver=True |
High EPSS 1.39% |
< 3.9.0 | 3.9.0 |
| GHSA-r23q-823p-vmf7 MLflow Command Injection vulnerability |
Critical EPSS 2.40% |
< 3.8.1 | 3.8.1 |
| GHSA-r23q-823p-vmf7 MLflow Command Injection vulnerability |
Critical EPSS 2.40% |
< 3.8.1 | 3.8.1 |
| GHSA-vhcx-3pq2-4fvc MLFlow path traversal vulnerability |
Critical EPSS 0.59% |
< 3.9.0rc0 | 3.9.0rc0 |
| GHSA-vhcx-3pq2-4fvc MLFlow path traversal vulnerability |
Critical EPSS 0.59% |
< 3.9.0rc0 | 3.9.0rc0 |
| GHSA-g6pg-52vf-843h MLFlow allows Tracing + Assessments Access |
High EPSS 0.34% |
<= 3.8.1 | No fix yet |
| GHSA-g6pg-52vf-843h MLFlow allows Tracing + Assessments Access |
High EPSS 0.34% |
<= 3.8.1 | No fix yet |
| GHSA-fhff-qmm8-h2fp Arbitrary file write via tar traversal in mlflow |
Critical EPSS 0.89% |
< 3.9.0rc0 | 3.9.0rc0 |
| GHSA-fhff-qmm8-h2fp Arbitrary file write via tar traversal in mlflow |
Critical EPSS 0.89% |
< 3.9.0rc0 | 3.9.0rc0 |
| GHSA-xch3-2f9x-wh9f MLflow has a command injection in mlflow/sagemaker/__init__.py |
High EPSS 1.48% |
< 3.8.0rc0 | 3.8.0rc0 |
| GHSA-xch3-2f9x-wh9f MLflow has a command injection in mlflow/sagemaker/__init__.py |
High EPSS 1.48% |
< 3.8.0rc0 | 3.8.0rc0 |
| GHSA-gq3w-7jj3-x7gr MLflow Use of Default Password Authentication Bypass Vulnerability |
High EPSS 1.08% |
< 3.8.0rc0 | 3.8.0rc0 |
| GHSA-gq3w-7jj3-x7gr MLflow Use of Default Password Authentication Bypass Vulnerability |
High EPSS 1.08% |
< 3.8.0rc0 | 3.8.0rc0 |
| GHSA-q2r8-vmq7-fpx2 MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability |
High EPSS 1.85% |
< 3.8.0rc0 | 3.8.0rc0 |
| GHSA-q2r8-vmq7-fpx2 MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability |
High EPSS 1.85% |
< 3.8.0rc0 | 3.8.0rc0 |
| GHSA-4x5p-f36r-mxxr mlflow Creates of Temporary File in Directory with Insecure Permissions |
High EPSS 0.24% |
< 3.4.0rc0 | 3.4.0rc0 |
| GHSA-4x5p-f36r-mxxr mlflow Creates of Temporary File in Directory with Insecure Permissions |
High EPSS 0.24% |
< 3.4.0rc0 | 3.4.0rc0 |
| GHSA-pgqp-8h46-6x4j MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation |
High EPSS 0.22% |
< 3.5.0 | 3.5.0 |
| GHSA-pgqp-8h46-6x4j MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation |
High EPSS 0.22% |
< 3.5.0 | 3.5.0 |
| GHSA-5cvj-7rg6-jggj MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability |
Critical EPSS 26.28% |
< 2.22.4>= 3.0.0rc0, < 3.0.0 | 2.22.43.0.0 |
| GHSA-5cvj-7rg6-jggj MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability |
Critical EPSS 26.28% |
< 2.22.4 | 2.22.4 |
| GHSA-5cvj-7rg6-jggj MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability |
Critical EPSS 26.28% |
>= 3.0.0rc0, < 3.0.0 | 3.0.0 |
| GHSA-6xj8-rrqx-r4cv MLflow Weak Password Requirements Authentication Bypass Vulnerability |
Critical EPSS 1.44% |
< 2.22.0rc0 | 2.22.0rc0 |
| GHSA-6xj8-rrqx-r4cv MLflow Weak Password Requirements Authentication Bypass Vulnerability |
Critical EPSS 1.44% |
< 2.22.0rc0 | 2.22.0rc0 |
| GHSA-wxj7-3fx5-pp9m MLFlow SSRF via gateway_proxy_handler |
Medium EPSS 0.44% |
< 3.1.0 | 3.1.0 |
| GHSA-wxj7-3fx5-pp9m MLFlow SSRF via gateway_proxy_handler |
Medium EPSS 0.44% |
>= 3.0.0rc0, < 3.1.0 | 3.1.0 |
| GHSA-wxj7-3fx5-pp9m MLFlow SSRF via gateway_proxy_handler |
Medium EPSS 0.44% |
< 2.22.2 | 2.22.2 |
| GHSA-4rj2-9gcx-5qhx MLflow has Weak Password Requirements |
Medium EPSS 0.37% |
< 2.19.0 | 2.19.0 |
| GHSA-4rj2-9gcx-5qhx MLflow has Weak Password Requirements |
Medium EPSS 0.37% |
< 2.19.0 | 2.19.0 |
| GHSA-969w-gqqr-g6j3 MLflow Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.22% |
>= 2.17.0, < 2.20.3 | 2.20.3 |
| GHSA-969w-gqqr-g6j3 MLflow Cross-Site Request Forgery (CSRF) vulnerability |
High EPSS 0.22% |
>= 2.17.0, < 2.20.3 | 2.20.3 |
| GHSA-49m6-vrr9-2cqm MLflow Uncontrolled Resource Consumption vulnerability |
High EPSS 11.31% |
<= 2.17.2 | No fix yet |
| GHSA-49m6-vrr9-2cqm MLflow Uncontrolled Resource Consumption vulnerability |
High EPSS 11.31% |
<= 2.17.2 | No fix yet |
| GHSA-4rqf-8pfm-p36r MLflow has a Local File Read/Path Traversal in dbfs |
High EPSS 2.77% |
< 2.17.0rc0 | 2.17.0rc0 |
| GHSA-4rqf-8pfm-p36r MLflow has a Local File Read/Path Traversal in dbfs |
High EPSS 2.77% |
< 2.17.0rc0 | 2.17.0rc0 |
| GHSA-q3gw-8236-5jw4 MLflow Uncontrolled Resource Consumption vulnerability |
Medium EPSS 0.66% |
<= 2.13.2 | No fix yet |
| GHSA-q3gw-8236-5jw4 MLflow Uncontrolled Resource Consumption vulnerability |
Medium EPSS 0.66% |
<= 2.13.2 | No fix yet |
| GHSA-qpgc-w4mg-6v92 MLflow's excessive directory permissions allow local privilege escalation |
High EPSS 0.12% |
< 2.16.0 | 2.16.0 |
| GHSA-qpgc-w4mg-6v92 MLflow's excessive directory permissions allow local privilege escalation |
High EPSS 0.12% |
< 2.16.0 | 2.16.0 |
| GHSA-8f8q-q2j7-7j2m Undefined Behavior in mlflow |
Medium EPSS 0.44% |
< 2.11.3 | 2.11.3 |
| GHSA-8f8q-q2j7-7j2m Undefined Behavior in mlflow |
Medium EPSS 0.44% |
< 2.11.3 | 2.11.3 |
| GHSA-j46q-5pxx-8vmw Local File Inclusion in mlflow |
High EPSS 21.85% |
< 2.11.3 | 2.11.3 |
| GHSA-j46q-5pxx-8vmw Local File Inclusion in mlflow |
High EPSS 21.85% |
< 2.11.3 | 2.11.3 |
| GHSA-5q6c-ffvg-xcm9 Remote code execution in mlflow |
High EPSS 2.40% |
< 2.9.0 | 2.9.0 |
| GHSA-5q6c-ffvg-xcm9 Remote code execution in mlflow |
High EPSS 2.40% |
< 2.9.0 | 2.9.0 |
| GHSA-pqcv-qw2r-r859 MLFlow improper input validation |
High EPSS 0.88% |
>= 1.11.0, <= 2.13.1 | No fix yet |
| GHSA-pqcv-qw2r-r859 MLFlow improper input validation |
High EPSS 0.88% |
>= 1.11.0, <= 2.13.1 | No fix yet |
| GHSA-cv6c-7963-wxcg MLFlow unsafe deserialization |
High EPSS 0.80% |
>= 1.27.0, <= 2.14.1 | No fix yet |
| GHSA-cv6c-7963-wxcg MLFlow unsafe deserialization |
High EPSS 0.80% |
>= 1.27.0, <= 2.14.1 | No fix yet |
| GHSA-wf7f-8fxf-xfxc MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 0.5.0, <= 3.4.0 | No fix yet |
| GHSA-wf7f-8fxf-xfxc MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 0.5.0, <= 3.4.0 | No fix yet |
| GHSA-cwgg-w6mp-w9hg MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 2.5.0, <= 2.14.1 | No fix yet |
| GHSA-cwgg-w6mp-w9hg MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 2.5.0, <= 2.14.1 | No fix yet |
| GHSA-j8mg-pqc5-x9gj MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 2.0.0rc0, <= 2.14.1 | No fix yet |
| GHSA-j8mg-pqc5-x9gj MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 2.0.0rc0, <= 2.14.1 | No fix yet |
| GHSA-7p8j-qv6x-f4g4 MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 1.23.0, <= 2.14.1 | No fix yet |
| GHSA-7p8j-qv6x-f4g4 MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 1.23.0, <= 2.14.1 | No fix yet |
| GHSA-x38x-g6gr-jqff MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 1.24.0, <= 2.14.1 | No fix yet |
| GHSA-x38x-g6gr-jqff MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 1.24.0, <= 2.14.1 | No fix yet |
| GHSA-ghv6-9r9j-wh4j MLFlow unsafe deserialization |
High EPSS 0.70% |
>= 0.9.0, <= 2.14.1 | No fix yet |
| GHSA-ghv6-9r9j-wh4j MLFlow unsafe deserialization |
High EPSS 0.70% |
>= 0.9.0, <= 2.14.1 | No fix yet |
| GHSA-43c4-9qgj-x742 MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 1.1.0, <= 2.14.1 | No fix yet |
| GHSA-43c4-9qgj-x742 MLFlow unsafe deserialization |
High EPSS 0.62% |
>= 1.1.0, <= 2.14.1 | No fix yet |
| GHSA-76cg-cfhx-373f MLFlow unsafe deserialization |
High EPSS 0.69% |
>= 1.1.0, <= 2.14.1 | No fix yet |
| GHSA-76cg-cfhx-373f MLFlow unsafe deserialization |
High EPSS 0.69% |
>= 1.1.0, <= 2.14.1 | No fix yet |
| GHSA-rfqq-wq6w-72jm MLflow has a Local File Read/Path Traversal bypass |
High EPSS 43.28% |
< 2.12.1 | 2.12.1 |
| GHSA-rfqq-wq6w-72jm MLflow has a Local File Read/Path Traversal bypass |
High EPSS 43.28% |
>= 2.9.2, < 2.12.1 | 2.12.1 |
| GHSA-p4jx-q62p-x5jr MLflow allows low privilege users to delete any artifact |
Medium EPSS 0.33% |
< 2.10.1 | 2.10.1 |
| GHSA-p4jx-q62p-x5jr MLflow allows low privilege users to delete any artifact |
Medium EPSS 0.33% |
< 2.10.1 | 2.10.1 |
| GHSA-hq88-wg7q-gp4g mlflow vulnerable to Path Traversal |
Critical EPSS 0.73% |
< 2.10.0 | 2.10.0 |
| GHSA-hq88-wg7q-gp4g mlflow vulnerable to Path Traversal |
Critical EPSS 0.73% |
< 2.10.0 | 2.10.0 |
| GHSA-m49c-5c52-6696 mlflow vulnerable to Path Traversal |
High EPSS 0.71% |
<= 2.9.2 | No fix yet |
| GHSA-m49c-5c52-6696 mlflow vulnerable to Path Traversal |
High EPSS 0.71% |
<= 2.9.2 | No fix yet |
| GHSA-f42m-mvfv-cgw5 mlflow vulnerable to Path Traversal |
High EPSS 0.70% |
<= 2.9.2 | No fix yet |
| GHSA-f42m-mvfv-cgw5 mlflow vulnerable to Path Traversal |
High EPSS 0.70% |
<= 2.9.2 | No fix yet |
| GHSA-5mvj-wmgj-7q8c mlflow vulnerable to Path Traversal |
High EPSS 0.86% |
<= 2.9.2 | No fix yet |
| GHSA-5mvj-wmgj-7q8c mlflow vulnerable to Path Traversal |
High EPSS 0.86% |
<= 2.9.2 | No fix yet |
| GHSA-j62r-wxqq-f3gf mlflow vulnerable to Path Traversal |
High EPSS 0.86% |
< 2.12.1 | 2.12.1 |
| GHSA-j62r-wxqq-f3gf mlflow vulnerable to Path Traversal |
High EPSS 0.86% |
< 2.12.1 | 2.12.1 |
| GHSA-f82r-jj5r-6g97 mlflow Path Traversal vulnerability |
High EPSS 2.72% |
< 2.12.1 | 2.12.1 |
| GHSA-f82r-jj5r-6g97 mlflow Path Traversal vulnerability |
High EPSS 2.72% |
< 2.12.1 | 2.12.1 |
| GHSA-6749-m5cp-6cg7 Cross-site Scripting in MLFlow |
Critical EPSS 0.88% |
< 2.10.0 | 2.10.0 |
| GHSA-6749-m5cp-6cg7 Cross-site Scripting in MLFlow |
Critical EPSS 0.88% |
< 2.10.0 | 2.10.0 |
| GHSA-3v79-q7ph-j75h MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution |
Critical EPSS 0.66% |
< 2.10.0 | 2.10.0 |
| GHSA-3v79-q7ph-j75h MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution |
Critical EPSS 0.66% |
< 2.10.0 | 2.10.0 |
| GHSA-qg8p-32gr-gh6x MLflow Local File Disclosure Vulnerability |
High EPSS 3.92% |
< 2.9.2 | 2.9.2 |
| GHSA-qg8p-32gr-gh6x MLflow Local File Disclosure Vulnerability |
High EPSS 3.92% |
< 2.9.2 | 2.9.2 |
| GHSA-wv8q-4f85-2p8p MLflow Path Traversal Vulnerability |
High EPSS 1.02% |
< 2.9.2 | 2.9.2 |
| GHSA-wv8q-4f85-2p8p MLflow Path Traversal Vulnerability |
High EPSS 1.02% |
< 2.9.2 | 2.9.2 |
| GHSA-hh8p-p8mp-gqhm MLFlow Path Traversal Vulnerability |
Critical EPSS 2.03% |
< 2.9.2 | 2.9.2 |
| GHSA-hh8p-p8mp-gqhm MLFlow Path Traversal Vulnerability |
Critical EPSS 2.03% |
< 2.9.2 | 2.9.2 |
| GHSA-59v3-898r-qwhj MLflow Server-Side Request Forgery (SSRF) |
Critical EPSS 1.52% |
< 2.9.2 | 2.9.2 |
| GHSA-59v3-898r-qwhj MLflow Server-Side Request Forgery (SSRF) |
Critical EPSS 1.52% |
< 2.9.2 | 2.9.2 |
| GHSA-hvc6-42vf-jhf8 mlflow Command Injection vulnerability |
High EPSS 1.22% |
< 2.9.2 | 2.9.2 |
| GHSA-hvc6-42vf-jhf8 mlflow Command Injection vulnerability |
High EPSS 1.22% |
< 2.9.2 | 2.9.2 |
| GHSA-5r3q-93q3-f978 MLflow Path Traversal Vulnerability |
High EPSS 89.72% |
< 2.9.2 | 2.9.2 |
| GHSA-5r3q-93q3-f978 MLflow Path Traversal Vulnerability |
High EPSS 89.72% |
< 2.9.2 | 2.9.2 |
| GHSA-554w-xh4j-8w64 Path traversal in MLflow |
High EPSS 3.29% |
< 2.9.2 | 2.9.2 |
| GHSA-554w-xh4j-8w64 Path traversal in MLflow |
High EPSS 3.29% |
< 2.9.2 | 2.9.2 |
| GHSA-v945-r3rc-6fjm Path traversal in MLflow |
High EPSS 1.08% |
< 2.9.2 | 2.9.2 |
| GHSA-v945-r3rc-6fjm Path traversal in MLflow |
High EPSS 1.08% |
< 2.9.2 | 2.9.2 |
| GHSA-cxfr-5q3r-2rc2 Jinja2 template injection in mlflow |
High EPSS 0.94% |
< 2.9.2 | 2.9.2 |
| GHSA-cxfr-5q3r-2rc2 Jinja2 template injection in mlflow |
High EPSS 0.94% |
< 2.9.2 | 2.9.2 |
| GHSA-vwhf-3v6x-wff8 Cross-site Scripting (XSS) in MLflow |
Medium EPSS 1.66% |
< 2.9.1 | 2.9.1 |
| GHSA-vwhf-3v6x-wff8 Cross-site Scripting (XSS) in MLflow |
Medium EPSS 1.66% |
< 2.9.0 | 2.9.0 |
| GHSA-wqxf-447m-6f5f Information exposure in MLflow |
High EPSS 36.58% |
< 2.9.0 | 2.9.0 |
| GHSA-wqxf-447m-6f5f Information exposure in MLflow |
High EPSS 36.58% |
< 2.9.0 | 2.9.0 |
| GHSA-4qq5-mxxx-m6gg MLflow authentication requirement bypass can allow a user to arbitrarily create an account |
Critical EPSS 1.17% |
< 2.8.0 | 2.8.0 |
| GHSA-4qq5-mxxx-m6gg MLflow authentication requirement bypass can allow a user to arbitrarily create an account |
Critical EPSS 1.17% |
< 2.8.0 | 2.8.0 |
| GHSA-5p3h-7fwh-92rc Remote Code Execution due to Full Controled File Write in mlflow |
Critical EPSS 47.87% |
< 2.9.2 | 2.9.2 |
| GHSA-5p3h-7fwh-92rc Remote Code Execution due to Full Controled File Write in mlflow |
Critical EPSS 47.87% |
< 2.9.2 | 2.9.2 |
| GHSA-f798-qm4r-23r5 MLflow allowed arbitrary files to be PUT onto the server |
High EPSS 4.49% |
< 2.8.1 | 2.8.1 |
| GHSA-f798-qm4r-23r5 MLflow allowed arbitrary files to be PUT onto the server |
High EPSS 4.49% |
< 2.8.1 | 2.8.1 |
| GHSA-ffw3-6378-cqgp mlflow vulnerable to OS Command Injection |
High EPSS 1.25% |
< 2.6.0 | 2.6.0 |
| GHSA-ffw3-6378-cqgp mlflow vulnerable to OS Command Injection |
High EPSS 1.25% |
< 2.6.0 | 2.6.0 |
| GHSA-fmxj-6h9g-6vw3 MLflow Path Traversal vulnerability |
Critical EPSS 67.55% |
< 2.5.0 | 2.5.0 |
| GHSA-fmxj-6h9g-6vw3 MLflow Path Traversal vulnerability |
Critical EPSS 67.55% |
< 2.5.0 | 2.5.0 |
| GHSA-wjq3-7jxx-whj9 mlflow Path Traversal vulnerability |
Critical EPSS 6.36% |
< 2.3.0 | 2.3.0 |
| GHSA-wjq3-7jxx-whj9 mlflow Path Traversal vulnerability |
Critical EPSS 6.36% |
< 2.3.1 | 2.3.1 |
| GHSA-wc6j-5g83-xfm6 mflow vulnerable to directory traversal |
High EPSS 1.00% |
< 2.0.1 | 2.0.1 |
| GHSA-wc6j-5g83-xfm6 mflow vulnerable to directory traversal |
High EPSS 1.00% |
< 2.0.0rc0 | 2.0.0rc0 |
| GHSA-83fm-w79m-64r5 Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs |
Critical | < 2.3.1 | 2.3.1 |
| GHSA-x422-6qhv-p29g Relative path traversal in mlflow |
Critical EPSS 4.15% |
< 2.3.1 | 2.3.1 |
| GHSA-x422-6qhv-p29g Relative path traversal in mlflow |
Critical EPSS 4.15% |
< 2.3.1 | 2.3.1 |
| GHSA-wp72-7hj9-5265 Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs |
Low EPSS 0.58% |
< 2.2.1 | 2.2.1 |
| GHSA-xg73-94fp-g449 mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs |
Critical EPSS 69.68% |
< 2.2.1 | 2.2.1 |
| GHSA-xg73-94fp-g449 mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs |
Critical EPSS 69.68% |
< 2.2.1 | 2.2.1 |
| GHSA-wp72-7hj9-5265 Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs |
Low EPSS 0.58% |
< 2.2.2 | 2.2.2 |
| GHSA-vqj2-4v8m-8vrq Insecure Temporary File in mlflow |
High EPSS 1.57% |
< 1.23.1 | 1.23.1 |
| GHSA-vqj2-4v8m-8vrq Insecure Temporary File in mlflow |
High EPSS 1.57% |
< 1.23.1 | 1.23.1 |
MergeHarbor checks every repository's dependencies against this database, ranks what matters by exploitability and reachability, routes it to the owning team and opens the fix pull request.
Check your repos with MergeHarbor