Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2628902
AlmaLinux
6444
Alpaquita
17693
Alpine
10788
Android
4071
Azure Linux
20534
BellSoft Hardened Containers
963
Bitnami
10023
Chainguard
1293698
CleanStart
17870
CRAN
14
crates.io
3024
Debian
73572
Echo
8123
GHC
3
GIT
119885
GitHub Actions
63
Go
9773
Hackage
37
Hex
436
Julia
1713
Linux
31104
Mageia
6364
Maven
7135
MinimOS
184753
npm
231719
NuGet
1957
opam
36
openEuler
9532
openSUSE
15288
OSS-Fuzz
4059
Packagist
7294
Pub
12
PyPI
26281
Red Hat
25352
Red Hat Lightwell
288
Rocky Linux
4991
Root
20233
RubyGems
5462
SUSE
24479
SwiftURL
61
TuxCare
23363
Ubuntu
70626
VSCode
21
Wolfi
329765
ID
Packages
Summary
Published
arrow_upward
Attributes
CGA-r6q3-5589-9w3r
Chainguard/mlflow
See record for full details
15 Sep
Fix available
Severity - 9.1 (Critical)
PYSEC-2026-419
PyPI/mlflow
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
29 Jun
No fix available
Severity - 9.1 (Critical)
MINI-54gx-rj97-rrc8
MinimOS/mlflow
See record for full details
18 Jun
No fix available
CGA-r8wv-83w4-m5q9
Chainguard/mlflow-fips
See record for full details
18 Apr
Fix available
Severity - 9.1 (Critical)
CGA-8rq3-46r7-ph95
Chainguard/mlflow-fips
See record for full details
17 Apr
Fix available
Severity - 9.1 (Critical)
CGA-vvcp-hv24-rh7p
Chainguard/mlflow
See record for full details
08 Apr
Fix available
Severity - 9.1 (Critical)
CGA-574c-9g4w-6g8g
Chainguard/mlflow
See record for full details
08 Apr
Fix available
Severity - 9.1 (Critical)
CGA-rq62-c6g5-2mqq
Chainguard/mlflow-iamguarded-compat
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
CGA-jwj2-fxv8-2vx7
Chainguard/mlflow-iamguarded-compat
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
CGA-4995-xhf9-8vhc
Chainguard/mlflow
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
CGA-6f36-8cj9-mcpx
Chainguard/mlflow
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
GHSA-7qhf-v65m-g5f3
PyPI/mlflow
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
03 Apr
No fix available
Severity - 9.1 (Critical)
Vulnerability Database - OSV