Skip to content
OpenAdvisories

Package · PyPI

clearml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.0
    CVE-2024-24591

    Allegro AI ClearML path traversal vulnerability

    A path traversal vulnerability in versions 1.4.0 to 1.14.1 of the client SDK of Allegro AI’s ClearML platform enables a maliciously uploaded dataset to write local or remote files to an arbitrary location on an end user’s system when interacted with.

    Allegro.AI ClearML clearml PyPI
  • High 8.0
    CVE-2024-24590 Public exploit

    Allegro AI ClearML vulnerable to deserialization of untrusted data

    Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

    Allegro.AI ClearML clearml PyPI