Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-424
  • PyPI/mlflow
Mlflow: Command Injection when serving models with enable_mlserver=True 29 Jun
  • Fix available
  • Severity - 9.6 (Critical)
MINI-p4jm-5v9f-3whq
  • MinimOS/mlflow
See record for full details 21 Jun
  • Fix available
BIT-mlflow-2026-0596
  • Bitnami/mlflow
Command Injection in mlflow/mlflow 16 Apr
  • Fix available
  • Severity - 7.8 (High)
GHSA-rvhj-8chj-8v3c
  • PyPI/mlflow
Mlflow: Command Injection when serving models with enable_mlserver=True 31 Mar
  • Fix available
  • Severity - 9.6 (Critical)