Skip to contentLfprojects vulnerabilities
Newest
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Authentication BypassCVE-2023-6014Fix available9.1 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File UploadCVE-2023-6015Fix available10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreMLflow Arbitrary File WriteCVE-2023-6018Fix availableEPSS 47.9%10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreOS Command Injection in mlflow/mlflowCVE-2023-4033Fix available8.8 High
- apptainerApptainer's ineffective privileges drop when requesting container networkCVE-2023-38496Fix available6.1 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflowCVE-2023-3765Fix availableEPSS 67.3%10.0 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-2780Fix available9.8 Critical
- lfprojects mlflowmflow vulnerable to directory traversalCVE-2023-30172Fix available7.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreRelative Path Traversal in mlflow/mlflowCVE-2023-2356Fix available10.0 Critical
- apptainer, redhat enterprise linux, sylabs singularity +2 moreUnpatched extfs vulnerabilities are exploitable through suid-mode ApptainerCVE-2023-30549Fix available7.1 High
- lfprojects vector packet processorFP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01...CVE-2022-463977.5 High
- lfprojects mlflow, mlflow mlflow/mlflow +1 morePath Traversal: '\..\filename' in mlflow/mlflowCVE-2023-1177Public exploitFix availableEPSS 69.7%9.3 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreAbsolute Path Traversal in mlflow/mlflowCVE-2023-1176Fix available5.3 Medium
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreInsecure Temporary File in mlflow/mlflowCVE-2022-0736Fix available8.2 High
- asyncapi modelinaImproper Control of Generation of Code ('Code Injection') in @asyncapi/modelinaCVE-2023-23619Fix available10.0 Critical