ML
Product
mlflow/mlflow
29
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 17Medium 6Low 0
Watch
Add mlflow/mlflow to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-3198 | 6.5 | Jun 2 | Improper Access Control in mlflow/mlflow Affected: through latest |
| CVE-2026-2734 | 6.5 | May 21 | Authorization Bypass in SearchModelVersions in mlflow/mlflow Affected: before 3.10.0 |
| CVE-2025-1474 | 5.5 | Mar 20 | Weak Password Requirements in mlflow/mlflow Affected: before 2.19.0 |
| CVE-2024-3099 | 5.4 | Jun 6 | Denial of Service and Data Model Poisoning via URL Encoding in mlflow/mlflow Affected: through latest |
| CVE-2024-4263 | 5.4 | May 16 | Improper Access Control in mlflow/mlflow Affected: before 2.10.1 |
| CVE-2024-6838 | 5.3 | Mar 20 | Uncontrolled Resource Consumption in mlflow/mlflow Affected: through latest |
Showing 6