Skip to content
OpenAdvisories

Package · PyPI

clearml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2024-24590 Public exploit

    Allegro AI ClearML vulnerable to deserialization of untrusted data

    Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

    Allegro.AI ClearML clearml PyPI