Skip to content
OpenAdvisories

Vendor

Allegro.AI

9 known vulnerabilities.

Products

ClearML 6 allegroai/clearml 2 allegroai/clearml-server 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.4
    CVE-2026-8387

    Relative Path Traversal in allegroai/clearml

    A vulnerability in allegroai/clearml versions up to and including 1.16.5 allows for relative path traversal when extracting `.zip` archives using the `ZipFile.extractall()` method in `StorageManager._extract_to_cache()`. This issue arises due to the lack of p…

    Allegro.AI allegroai/clearml