[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOqtXsqayh7tC0jH2oXSOlzBeKdzo0rfdQnG6hwTAZ3w":3,"g5a-family:lfprojects\u002Fmlflow":505,"g5a-ex:lfprojects\u002Fmlflow@*":506},{"success":4,"data":5},true,{"product":6,"versions":285,"topVulnerabilitiesByEpss":420,"kevVulnerabilities":477,"seoMetadata":483,"meta":502},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":284},"lfprojects","mlflow",134,53,0,"2025-10-29",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258,260,262,264,266,268,270,272,274,276,278,280,282],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.7",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.1",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"1.14.0",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"1.14.1",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"1.15.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"1.16.0",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"1.17.0",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"1.18.0",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"1.19.0",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"1.20.0",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"1.20.1",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"1.20.2",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"1.21.0",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"1.22.0",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"1.23.0",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"1.23.1",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"1.24.0",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"1.25.0",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"1.25.1",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"1.26.0",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"1.26.1",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"1.27.0",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.0",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"1.29.0",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"1.30.0",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.2",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.0",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.1",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.1",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.0",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.1",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.2",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.0",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.1",{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.2",{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.3",{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.1",{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.2",{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.0",{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.1",{"version":164,"cve_count":165,"kev_count":11,"has_kev":16},"2.13.2",1,{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.0",{"version":169,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.1",{"version":171,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.2",{"version":173,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.3",{"version":175,"cve_count":11,"kev_count":11,"has_kev":16},"2.15.0",{"version":177,"cve_count":165,"kev_count":11,"has_kev":16},"2.15.1",{"version":179,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.0",{"version":181,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.1",{"version":183,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.2",{"version":185,"cve_count":11,"kev_count":11,"has_kev":16},"2.17.0",{"version":187,"cve_count":11,"kev_count":11,"has_kev":16},"2.17.1",{"version":189,"cve_count":165,"kev_count":11,"has_kev":16},"2.17.2",{"version":191,"cve_count":11,"kev_count":11,"has_kev":16},"2.18.0",{"version":193,"cve_count":11,"kev_count":11,"has_kev":16},"2.19.0",{"version":195,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":197,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.0",{"version":199,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.1",{"version":201,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.2",{"version":203,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.3",{"version":205,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.4",{"version":207,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":209,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.0",{"version":211,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.1",{"version":213,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.2",{"version":215,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.3",{"version":217,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.2",{"version":219,"cve_count":11,"kev_count":11,"has_kev":16},"2.22.0",{"version":221,"cve_count":11,"kev_count":11,"has_kev":16},"2.22.1",{"version":223,"cve_count":11,"kev_count":11,"has_kev":16},"2.22.2",{"version":225,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":227,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.1",{"version":229,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.2",{"version":231,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":233,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":235,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.2",{"version":237,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":239,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":241,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":243,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.1",{"version":245,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":247,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.1",{"version":249,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.0",{"version":251,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.1",{"version":253,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.2",{"version":255,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":257,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.1",{"version":259,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":261,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.1",{"version":263,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.2",{"version":265,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.3",{"version":267,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.4",{"version":269,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0",{"version":271,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.0",{"version":273,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.1",{"version":275,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.2",{"version":277,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":279,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.0",{"version":281,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.1",{"version":283,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.0","Mlflow by Lfprojects is a technology product with 134 tracked versions and 53 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},{"version":164,"cve_count":165,"kev_count":11,"has_kev":16},{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},{"version":169,"cve_count":11,"kev_count":11,"has_kev":16},{"version":171,"cve_count":11,"kev_count":11,"has_kev":16},{"version":173,"cve_count":11,"kev_count":11,"has_kev":16},{"version":175,"cve_count":11,"kev_count":11,"has_kev":16},{"version":177,"cve_count":165,"kev_count":11,"has_kev":16},{"version":179,"cve_count":11,"kev_count":11,"has_kev":16},{"version":181,"cve_count":11,"kev_count":11,"has_kev":16},{"version":183,"cve_count":11,"kev_count":11,"has_kev":16},{"version":185,"cve_count":11,"kev_count":11,"has_kev":16},{"version":187,"cve_count":11,"kev_count":11,"has_kev":16},{"version":189,"cve_count":165,"kev_count":11,"has_kev":16},{"version":191,"cve_count":11,"kev_count":11,"has_kev":16},{"version":193,"cve_count":11,"kev_count":11,"has_kev":16},{"version":195,"cve_count":11,"kev_count":11,"has_kev":16},{"version":197,"cve_count":11,"kev_count":11,"has_kev":16},{"version":199,"cve_count":11,"kev_count":11,"has_kev":16},{"version":201,"cve_count":11,"kev_count":11,"has_kev":16},{"version":203,"cve_count":11,"kev_count":11,"has_kev":16},{"version":205,"cve_count":11,"kev_count":11,"has_kev":16},{"version":207,"cve_count":11,"kev_count":11,"has_kev":16},{"version":209,"cve_count":11,"kev_count":11,"has_kev":16},{"version":211,"cve_count":11,"kev_count":11,"has_kev":16},{"version":213,"cve_count":11,"kev_count":11,"has_kev":16},{"version":215,"cve_count":11,"kev_count":11,"has_kev":16},{"version":217,"cve_count":11,"kev_count":11,"has_kev":16},{"version":219,"cve_count":11,"kev_count":11,"has_kev":16},{"version":221,"cve_count":11,"kev_count":11,"has_kev":16},{"version":223,"cve_count":11,"kev_count":11,"has_kev":16},{"version":225,"cve_count":11,"kev_count":11,"has_kev":16},{"version":227,"cve_count":11,"kev_count":11,"has_kev":16},{"version":229,"cve_count":11,"kev_count":11,"has_kev":16},{"version":231,"cve_count":11,"kev_count":11,"has_kev":16},{"version":233,"cve_count":11,"kev_count":11,"has_kev":16},{"version":235,"cve_count":11,"kev_count":11,"has_kev":16},{"version":237,"cve_count":11,"kev_count":11,"has_kev":16},{"version":239,"cve_count":11,"kev_count":11,"has_kev":16},{"version":241,"cve_count":11,"kev_count":11,"has_kev":16},{"version":243,"cve_count":11,"kev_count":11,"has_kev":16},{"version":245,"cve_count":11,"kev_count":11,"has_kev":16},{"version":247,"cve_count":11,"kev_count":11,"has_kev":16},{"version":249,"cve_count":11,"kev_count":11,"has_kev":16},{"version":251,"cve_count":11,"kev_count":11,"has_kev":16},{"version":253,"cve_count":11,"kev_count":11,"has_kev":16},{"version":255,"cve_count":11,"kev_count":11,"has_kev":16},{"version":257,"cve_count":11,"kev_count":11,"has_kev":16},{"version":259,"cve_count":11,"kev_count":11,"has_kev":16},{"version":261,"cve_count":11,"kev_count":11,"has_kev":16},{"version":263,"cve_count":11,"kev_count":11,"has_kev":16},{"version":265,"cve_count":11,"kev_count":11,"has_kev":16},{"version":267,"cve_count":11,"kev_count":11,"has_kev":16},{"version":269,"cve_count":11,"kev_count":11,"has_kev":16},{"version":271,"cve_count":11,"kev_count":11,"has_kev":16},{"version":273,"cve_count":11,"kev_count":11,"has_kev":16},{"version":275,"cve_count":11,"kev_count":11,"has_kev":16},{"version":277,"cve_count":11,"kev_count":11,"has_kev":16},{"version":279,"cve_count":11,"kev_count":11,"has_kev":16},{"version":281,"cve_count":11,"kev_count":11,"has_kev":16},{"version":283,"cve_count":11,"kev_count":11,"has_kev":16},[421,429,436,442,447,452,457,461,466,471],{"cveId":422,"description":423,"publishedDate":424,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":428},"CVE-2023-6909","Path Traversal: '\\..\\filename' in GitHub repository mlflow\u002Fmlflow prior to 2.9.2.","2023-12-18",7.5,"v3.1","High",0.89716,{"cveId":430,"description":431,"publishedDate":432,"cvssScore":433,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":435},"CVE-2023-1177","Path Traversal: '\\..\\filename' in GitHub repository mlflow\u002Fmlflow prior to 2.2.1.\n\n","2023-03-24",9.8,"Critical",0.6968,{"cveId":437,"description":438,"publishedDate":439,"cvssScore":440,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":441},"CVE-2023-3765","Absolute Path Traversal in GitHub repository mlflow\u002Fmlflow prior to 2.5.0.","2023-07-19",10,0.6755,{"cveId":443,"description":444,"publishedDate":445,"cvssScore":433,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":446},"CVE-2023-6018","An attacker can overwrite any file on the server hosting MLflow without any authentication.","2023-11-16",0.47874,{"cveId":448,"description":449,"publishedDate":450,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":451},"CVE-2024-3848","A path traversal vulnerability exists in mlflow\u002Fmlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.","2024-05-16",0.43284,{"cveId":453,"description":454,"publishedDate":455,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":456},"CVE-2023-43472","An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.","2023-12-05",0.36582,{"cveId":458,"description":459,"publishedDate":12,"cvssScore":433,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":460},"CVE-2025-11201","MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.",0.26256,{"cveId":462,"description":463,"publishedDate":464,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":465},"CVE-2024-2928","A Local File Inclusion (LFI) vulnerability was identified in mlflow\u002Fmlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '..\u002F'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '\u002Fetc\u002Fpasswd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.","2024-06-06",0.21847,{"cveId":467,"description":468,"publishedDate":469,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":470},"CVE-2025-0453","In mlflow\u002Fmlflow version 2.17.2, the `\u002Fgraphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.","2025-03-20",0.11033,{"cveId":472,"description":473,"publishedDate":474,"cvssScore":475,"cvssVersion":426,"severity":434,"isKev":4,"epssScore":476},"CVE-2026-64849","MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST \u002Fapi\u002F2.0\u002Fmlflow\u002Fwebhooks\u002F{id}\u002Ftest endpoint calls _validate_webhook_url() in mlflow\u002Futils\u002Fvalidation.py only for the original URL while mlflow\u002Fwebhooks\u002Fdelivery.py follows redirects and re-resolves the hostname without pinning the validated address, allowing attackers to reach internal or cloud metadata services and receive response_status and response_body. This issue is fixed in version 3.15.0.","2026-08-17",9.3,0.09839,[478],{"cveId":472,"description":473,"publishedDate":474,"cvssScore":475,"severity":434,"isKev":4,"epssScore":476,"cisaVulnName":479,"cisaDateAdded":480,"cisaShortDescription":481,"cisaRequiredAction":482},"MLflow Server-Side Request Forgery Vulnerability","2026-08-19","MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"title":484,"metaDescription":485,"keywords":486,"structuredData":487},"Mlflow by Lfprojects - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Mlflow by Lfprojects covering 134 versions with 53 tracked vulnerabilities including 1 critical and 0 high-severity issues. Real-time threat intelligence, CVE tracking, and security recommendations.","Mlflow vulnerabilities, Mlflow security, Mlflow CVE, Lfprojects Mlflow, Mlflow threat intelligence, Lfprojects security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":488,"@type":489,"name":490,"description":485,"url":491,"manufacturer":492,"applicationCategory":496,"softwareVersion":497,"mainEntity":498},"https:\u002F\u002Fschema.org","SoftwareApplication","Mlflow","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flfprojects\u002Fmlflow",{"@type":493,"name":494,"url":495},"Organization","Lfprojects","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Flfprojects","Security Software","134 versions tracked",{"@type":499,"name":500,"description":501,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mlflow Security Vulnerabilities","Security vulnerabilities affecting Mlflow by Lfprojects",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":503,"apiVersion":504},"2026-10-17T19:57:20.296Z","3.0",[],{"rows":507,"total":165,"capped":16,"failed":11},[508],{"cveId":472,"name":479,"severity":434,"cvss":475,"added":480,"epss":476,"published":509,"ranges":510,"checked":4,"hits":512,"covers":16},"2026-08-17T22:17:23.58",[511],"3.3.0 to before 3.15.0",[]]