Skip to content
OpenAdvisories

Package · PyPI

mlflow

87 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • High 7.5
    CVE-2023-6909 Scanner template EPSS 90%

    Path Traversal: '\..\filename' in mlflow/mlflow

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

    MLflow mlflow/mlflow mlflow PyPI
  • High 8.1
    CVE-2023-6831 Scanner template

    Path Traversal: '\..\filename' in mlflow/mlflow

    Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

    MLflow mlflow/mlflow mlflow PyPI
  • High 7.5
    CVE-2023-43472 Scanner template EPSS 37%

    Information exposure in MLflow

    An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.

    mlflow PyPI
  • High 8.8
    CVE-2023-4033

    OS Command Injection in mlflow/mlflow

    OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.

    MLflow mlflow/mlflow mlflow PyPI
  • High 7.5
    CVE-2023-30172

    mflow vulnerable to directory traversal

    A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.

    mlflow PyPI
  • High 8.2
    CVE-2022-0736

    Insecure Temporary File in mlflow/mlflow

    Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

    MLflow mlflow/mlflow mlflow PyPI