mlflow vulnerabilities (PyPI)
87 vulnerabilities.
mlflowPyPIMLFlow unsafe deserialization8.8 HighmlflowPyPIMLFlow unsafe deserialization8.8 HighmlflowPyPIMLFlow unsafe deserialization8.8 HighmlflowPyPIMLFlow unsafe deserialization8.8 HighmlflowPyPIImproper Access Control in mlflow/mlflow5.4 MediummlflowPyPIPath Traversal Bypass in mlflow/mlflow7.5 HighmlflowPyPILocal File Inclusion (LFI) via Scheme Confusion in mlflow/mlflow9.3 CriticalmlflowPyPILocal File Read via Path Traversal in mlflow/mlflow7.5 HighmlflowPyPIPath Traversal via Parameter Smuggling in mlflow/mlflow7.5 HighmlflowPyPIPath Traversal Vulnerability in mlflow/mlflow7.5 HighmlflowPyPIPath Traversal Vulnerability in mlflow/mlflow7.5 HighmlflowPyPIPath Traversal Vulnerability in mlflow/mlflow8.1 HighmlflowPyPIInsufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.7.5 HighmlflowPyPIInsufficient sanitization in MLflow leads to XSS when running an untrusted recipe.7.5 HighmlflowPyPIPath Traversal: '\..\filename'10.0 CriticalmlflowPyPIUnrestricted Upload of File with Dangerous Type8.8 HighmlflowPyPIPath Traversal: '\..\filename'9.8 CriticalmlflowPyPIServer-Side Request Forgery (SSRF)8.6 HighmlflowPyPICommand Injection9.0 CriticalmlflowPyPIPath Traversal: '\..\filename' in mlflow/mlflow7.5 HighmlflowPyPIPath Traversal: '\..\filename' in mlflow/mlflow8.1 HighmlflowPyPIPath Traversal in mlflow/mlflow9.6 CriticalmlflowPyPIImproper Neutralization of Special Elements Used in a Template Engine in mlflow/mlflow10.0 CriticalmlflowPyPIReflected XSS via Content-Type Header in mlflow/mlflow6.5 MediummlflowPyPIInformation exposure in MLflow7.5 HighmlflowPyPIMLflow Authentication Bypass9.1 CriticalmlflowPyPIMLflow Arbitrary File Upload10.0 CriticalmlflowPyPIMLflow Arbitrary File Write10.0 CriticalmlflowPyPIOS Command Injection in mlflow/mlflow8.8 HighmlflowPyPIAbsolute Path Traversal in mlflow/mlflow10.0 CriticalmlflowPyPIPath Traversal: '\..\filename' in mlflow/mlflow9.8 CriticalmlflowPyPImflow vulnerable to directory traversal7.5 HighmlflowPyPIRemote file access vulnerability in `mlflow server` and `mlflow ui` CLIsNo scoremlflowPyPIRelative Path Traversal in mlflow/mlflow10.0 CriticalmlflowPyPIPath Traversal: '\..\filename' in mlflow/mlflow9.3 CriticalmlflowPyPIAbsolute Path Traversal in mlflow/mlflow5.3 MediummlflowPyPIInsecure Temporary File in mlflow/mlflow8.2 High