Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2164851
AlmaLinux
5852
Alpaquita
14984
Alpine
4589
Android
3674
Azure Linux
16638
BellSoft Hardened Containers
744
Bitnami
9201
Chainguard
1007005
CleanStart
3365
CRAN
14
crates.io
2710
Debian
67211
Echo
6492
GHC
3
GIT
106029
GitHub Actions
55
Go
9131
Hackage
32
Hex
350
Julia
1713
Linux
29368
Mageia
6184
Maven
6992
MinimOS
140975
npm
228418
NuGet
1860
opam
29
openEuler
8541
openSUSE
14307
OSS-Fuzz
3999
Packagist
7026
Pub
11
PyPI
25064
Red Hat
23025
Rocky Linux
4218
Root
19442
RubyGems
4709
SUSE
23033
SwiftURL
59
TuxCare
9187
Ubuntu
64318
VSCode
21
Wolfi
284273
ID
Packages
Summary
Published
arrow_upward
Attributes
CGA-r6q3-5589-9w3r
Chainguard/mlflow
Wolfi/mlflow
See record for full details
2 days ago
Fix available
Severity - 9.1 (Critical)
PYSEC-2026-419
PyPI/mlflow
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
29 Jun
No fix available
Severity - 9.1 (Critical)
MINI-54gx-rj97-rrc8
MinimOS/mlflow
See record for full details
18 Jun
No fix available
CGA-r8wv-83w4-m5q9
Chainguard/mlflow-fips
See record for full details
18 Apr
Fix available
Severity - 9.1 (Critical)
CGA-8rq3-46r7-ph95
Chainguard/mlflow-fips
See record for full details
17 Apr
Fix available
Severity - 9.1 (Critical)
CGA-vvcp-hv24-rh7p
Chainguard/mlflow
Wolfi/mlflow
See record for full details
08 Apr
Fix available
Severity - 9.1 (Critical)
CGA-574c-9g4w-6g8g
Chainguard/mlflow
Wolfi/mlflow
See record for full details
08 Apr
Fix available
Severity - 9.1 (Critical)
CGA-rq62-c6g5-2mqq
Chainguard/mlflow-iamguarded-compat
Wolfi/mlflow-iamguarded-compat
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
CGA-jwj2-fxv8-2vx7
Chainguard/mlflow-iamguarded-compat
Wolfi/mlflow-iamguarded-compat
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
CGA-4995-xhf9-8vhc
Chainguard/mlflow
Wolfi/mlflow
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
CGA-6f36-8cj9-mcpx
Chainguard/mlflow
Wolfi/mlflow
See record for full details
07 Apr
Fix available
Severity - 9.1 (Critical)
GHSA-7qhf-v65m-g5f3
PyPI/mlflow
mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
03 Apr
No fix available
Severity - 9.1 (Critical)
Vulnerability Database - OSV