Skip to content
OpenAdvisories

Package · PyPI

clearml

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.8
    CVE-2025-8917

    Path Traversal Leading to Remote Code Execution in allegroai/clearml

    A vulnerability in allegroai/clearml version v2.0.1 allows for path traversal due to improper handling of symbolic and hard links in the `safe_extract` function. This flaw can lead to arbitrary file writes outside the intended directory, potentially resulting…

    Allegro.AI allegroai/clearml clearml PyPI
  • Medium 6.0
    CVE-2024-24595

    Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

    Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

    Allegro.AI ClearML clearml PyPI