Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
CLSA-2026-1787213730
  • TuxCare:PyPI/mlflow
TuxCare security update for mlflow (4 CVEs) 20 Aug
  • Fix available
CLSA-2026-1780879893
  • TuxCare:PyPI/mlflow
  • TuxCare:PyPI/mlflow-skinny
TuxCare security update for 2 packages (2 CVEs) 04 Aug
  • Fix available
PYSEC-2026-424
  • PyPI/mlflow
Mlflow: Command Injection when serving models with enable_mlserver=True 29 Jun
  • Fix available
  • Severity - 9.6 (Critical)
MINI-p4jm-5v9f-3whq
  • MinimOS/mlflow
See record for full details 21 Jun
  • Fix available
BIT-mlflow-2026-0596
  • Bitnami/mlflow
Command Injection in mlflow/mlflow 16 Apr
  • Fix available
  • Severity - 9.6 (Critical)
GHSA-rvhj-8chj-8v3c
  • PyPI/mlflow
Mlflow: Command Injection when serving models with enable_mlserver=True 31 Mar
  • Fix available
  • Severity - 9.6 (Critical)