Skip to content
OpenAdvisories

Package · PyPI

mlflow

87 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.6
    CVE-2026-10803

    MLflow Dataset Digest Computation digest_utils.py mlflow.data.digest_utils weak hash

    A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the…

    mlflow PyPI
  • Low 3.8
    CVE-2025-1474

    Weak Password Requirements in mlflow/mlflow

    In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violate…

    MLflow mlflow/mlflow mlflow PyPI