Total 111 security vulnerabilities recorded for lfprojects software and firmware.
An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment....
An attacker can overwrite any file on the server hosting MLflow without any authentication....
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0....
Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, t...
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0....
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1....
A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on th...
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1....
Apptainer is an open source container platform for Linux. There is an ext4 use-after-free flaw that is exploitable through versions of Apptainer < 1.1...
FP.io VPP (Vector Packet Processor) 22.10, 22.06, 22.02, 21.10, 21.06, 21.01, 20.09, 20.05, 20.01, 19.08, and 19.04 Generates a Predictable IV with CB...
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1. ...
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2....
Modelina is a library for generating data models based on inputs such as AsyncAPI, OpenAPI, or JSON Schema documents. Versions prior to 1.0.0 are vuln...
Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1....