Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-64849
  • github.com/mlflow/mlflow
 MLflow: Unauthenticated full-read SSRF in webhook delivery:... 17 Aug
  • Fix available
  • Severity - 9.3 (Critical)
CGA-747f-x3rc-crrx
  • Chainguard/mlflow
  • Wolfi/mlflow
 See record for full details 15 Sep
  • Fix available
BIT-mlflow-2026-64849
  • Bitnami/mlflow
 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) 21 Aug
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2026-3687
  • PyPI/mlflow
 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) 19 Aug
  • Fix available
  • Severity - 9.3 (Critical)
MINI-8g3x-hmjq-4q5r
  • MinimOS/mlflow
 See record for full details 18 Aug
  • Fix available
GHSA-7gwp-5pfp-969j
  • PyPI/mlflow
 MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding) 17 Aug
  • Fix available
  • Severity - 9.3 (Critical)