[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOqtXsqayh7tC0jH2oXSOlzBeKdzo0rfdQnG6hwTAZ3w":3,"g5a-ex:lfprojects\u002Fmlflow@*":498,"g5a-family:lfprojects\u002Fmlflow":500},{"success":4,"data":5},true,{"product":6,"versions":285,"topVulnerabilitiesByEpss":420,"kevVulnerabilities":475,"seoMetadata":476,"meta":495},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":284},"lfprojects","mlflow",134,53,0,"2025-10-29",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45,47,49,51,53,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,93,95,97,99,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,133,135,137,139,141,143,145,147,149,151,153,155,157,159,161,163,166,168,170,172,174,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224,226,228,230,232,234,236,238,240,242,244,246,248,250,252,254,256,258,260,262,264,266,268,270,272,274,276,278,280,282],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.0",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"0.2.1",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"0.3.0",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.0",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.1",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"0.4.2",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.0",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.1",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"0.5.2",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"0.6.0",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"0.7",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"0.7.0",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.0",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.1",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"0.8.2",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.0",{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},"0.9.1",{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0",{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0",{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},"1.10.0",{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},"1.11.0",{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.0",{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},"1.12.1",{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.0",{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},"1.13.1",{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},"1.14.0",{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},"1.14.1",{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},"1.15.0",{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},"1.16.0",{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},"1.17.0",{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},"1.18.0",{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},"1.19.0",{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},"1.2.0",{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},"1.20.0",{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},"1.20.1",{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},"1.20.2",{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},"1.21.0",{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},"1.22.0",{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},"1.23.0",{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},"1.23.1",{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},"1.24.0",{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},"1.25.0",{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},"1.25.1",{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},"1.26.0",{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},"1.26.1",{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},"1.27.0",{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},"1.28.0",{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},"1.29.0",{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},"1.3.0",{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},"1.30.0",{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},"1.4.0",{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},"1.5.0",{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},"1.6.0",{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.0",{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.1",{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},"1.7.2",{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},"1.8.0",{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.0",{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},"1.9.1",{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0",{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.1",{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0",{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.0",{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.1",{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},"2.10.2",{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1",{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.0",{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.1",{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.2",{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},"2.11.3",{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.1",{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},"2.12.2",{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.0",{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},"2.13.1",{"version":164,"cve_count":165,"kev_count":11,"has_kev":16},"2.13.2",1,{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.0",{"version":169,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.1",{"version":171,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.2",{"version":173,"cve_count":11,"kev_count":11,"has_kev":16},"2.14.3",{"version":175,"cve_count":11,"kev_count":11,"has_kev":16},"2.15.0",{"version":177,"cve_count":165,"kev_count":11,"has_kev":16},"2.15.1",{"version":179,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.0",{"version":181,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.1",{"version":183,"cve_count":11,"kev_count":11,"has_kev":16},"2.16.2",{"version":185,"cve_count":11,"kev_count":11,"has_kev":16},"2.17.0",{"version":187,"cve_count":11,"kev_count":11,"has_kev":16},"2.17.1",{"version":189,"cve_count":165,"kev_count":11,"has_kev":16},"2.17.2",{"version":191,"cve_count":11,"kev_count":11,"has_kev":16},"2.18.0",{"version":193,"cve_count":11,"kev_count":11,"has_kev":16},"2.19.0",{"version":195,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.0",{"version":197,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.0",{"version":199,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.1",{"version":201,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.2",{"version":203,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.3",{"version":205,"cve_count":11,"kev_count":11,"has_kev":16},"2.20.4",{"version":207,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1",{"version":209,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.0",{"version":211,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.1",{"version":213,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.2",{"version":215,"cve_count":11,"kev_count":11,"has_kev":16},"2.21.3",{"version":217,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.2",{"version":219,"cve_count":11,"kev_count":11,"has_kev":16},"2.22.0",{"version":221,"cve_count":11,"kev_count":11,"has_kev":16},"2.22.1",{"version":223,"cve_count":11,"kev_count":11,"has_kev":16},"2.22.2",{"version":225,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0",{"version":227,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.1",{"version":229,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.2",{"version":231,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.0",{"version":233,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.1",{"version":235,"cve_count":11,"kev_count":11,"has_kev":16},"2.4.2",{"version":237,"cve_count":11,"kev_count":11,"has_kev":16},"2.5.0",{"version":239,"cve_count":11,"kev_count":11,"has_kev":16},"2.6.0",{"version":241,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.0",{"version":243,"cve_count":11,"kev_count":11,"has_kev":16},"2.7.1",{"version":245,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.0",{"version":247,"cve_count":11,"kev_count":11,"has_kev":16},"2.8.1",{"version":249,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.0",{"version":251,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.1",{"version":253,"cve_count":11,"kev_count":11,"has_kev":16},"2.9.2",{"version":255,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.0",{"version":257,"cve_count":11,"kev_count":11,"has_kev":16},"3.0.1",{"version":259,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.0",{"version":261,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.1",{"version":263,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.2",{"version":265,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.3",{"version":267,"cve_count":11,"kev_count":11,"has_kev":16},"3.1.4",{"version":269,"cve_count":11,"kev_count":11,"has_kev":16},"3.2.0",{"version":271,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.0",{"version":273,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.1",{"version":275,"cve_count":11,"kev_count":11,"has_kev":16},"3.3.2",{"version":277,"cve_count":11,"kev_count":11,"has_kev":16},"3.4.0",{"version":279,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.0",{"version":281,"cve_count":11,"kev_count":11,"has_kev":16},"3.5.1",{"version":283,"cve_count":11,"kev_count":11,"has_kev":16},"3.6.0","Mlflow by Lfprojects is a technology product with 134 tracked versions and 53 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[286,287,288,289,290,291,292,293,294,295,296,297,298,299,300,301,302,303,304,305,306,307,308,309,310,311,312,313,314,315,316,317,318,319,320,321,322,323,324,325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402,403,404,405,406,407,408,409,410,411,412,413,414,415,416,417,418,419],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},{"version":48,"cve_count":11,"kev_count":11,"has_kev":16},{"version":50,"cve_count":11,"kev_count":11,"has_kev":16},{"version":52,"cve_count":11,"kev_count":11,"has_kev":16},{"version":54,"cve_count":11,"kev_count":11,"has_kev":16},{"version":56,"cve_count":11,"kev_count":11,"has_kev":16},{"version":58,"cve_count":11,"kev_count":11,"has_kev":16},{"version":60,"cve_count":11,"kev_count":11,"has_kev":16},{"version":62,"cve_count":11,"kev_count":11,"has_kev":16},{"version":64,"cve_count":11,"kev_count":11,"has_kev":16},{"version":66,"cve_count":11,"kev_count":11,"has_kev":16},{"version":68,"cve_count":11,"kev_count":11,"has_kev":16},{"version":70,"cve_count":11,"kev_count":11,"has_kev":16},{"version":72,"cve_count":11,"kev_count":11,"has_kev":16},{"version":74,"cve_count":11,"kev_count":11,"has_kev":16},{"version":76,"cve_count":11,"kev_count":11,"has_kev":16},{"version":78,"cve_count":11,"kev_count":11,"has_kev":16},{"version":80,"cve_count":11,"kev_count":11,"has_kev":16},{"version":82,"cve_count":11,"kev_count":11,"has_kev":16},{"version":84,"cve_count":11,"kev_count":11,"has_kev":16},{"version":86,"cve_count":11,"kev_count":11,"has_kev":16},{"version":88,"cve_count":11,"kev_count":11,"has_kev":16},{"version":90,"cve_count":11,"kev_count":11,"has_kev":16},{"version":92,"cve_count":11,"kev_count":11,"has_kev":16},{"version":94,"cve_count":11,"kev_count":11,"has_kev":16},{"version":96,"cve_count":11,"kev_count":11,"has_kev":16},{"version":98,"cve_count":11,"kev_count":11,"has_kev":16},{"version":100,"cve_count":11,"kev_count":11,"has_kev":16},{"version":102,"cve_count":11,"kev_count":11,"has_kev":16},{"version":104,"cve_count":11,"kev_count":11,"has_kev":16},{"version":106,"cve_count":11,"kev_count":11,"has_kev":16},{"version":108,"cve_count":11,"kev_count":11,"has_kev":16},{"version":110,"cve_count":11,"kev_count":11,"has_kev":16},{"version":112,"cve_count":11,"kev_count":11,"has_kev":16},{"version":114,"cve_count":11,"kev_count":11,"has_kev":16},{"version":116,"cve_count":11,"kev_count":11,"has_kev":16},{"version":118,"cve_count":11,"kev_count":11,"has_kev":16},{"version":120,"cve_count":11,"kev_count":11,"has_kev":16},{"version":122,"cve_count":11,"kev_count":11,"has_kev":16},{"version":124,"cve_count":11,"kev_count":11,"has_kev":16},{"version":126,"cve_count":11,"kev_count":11,"has_kev":16},{"version":128,"cve_count":11,"kev_count":11,"has_kev":16},{"version":130,"cve_count":11,"kev_count":11,"has_kev":16},{"version":132,"cve_count":11,"kev_count":11,"has_kev":16},{"version":134,"cve_count":11,"kev_count":11,"has_kev":16},{"version":136,"cve_count":11,"kev_count":11,"has_kev":16},{"version":138,"cve_count":11,"kev_count":11,"has_kev":16},{"version":140,"cve_count":11,"kev_count":11,"has_kev":16},{"version":142,"cve_count":11,"kev_count":11,"has_kev":16},{"version":144,"cve_count":11,"kev_count":11,"has_kev":16},{"version":146,"cve_count":11,"kev_count":11,"has_kev":16},{"version":148,"cve_count":11,"kev_count":11,"has_kev":16},{"version":150,"cve_count":11,"kev_count":11,"has_kev":16},{"version":152,"cve_count":11,"kev_count":11,"has_kev":16},{"version":154,"cve_count":11,"kev_count":11,"has_kev":16},{"version":156,"cve_count":11,"kev_count":11,"has_kev":16},{"version":158,"cve_count":11,"kev_count":11,"has_kev":16},{"version":160,"cve_count":11,"kev_count":11,"has_kev":16},{"version":162,"cve_count":11,"kev_count":11,"has_kev":16},{"version":164,"cve_count":165,"kev_count":11,"has_kev":16},{"version":167,"cve_count":11,"kev_count":11,"has_kev":16},{"version":169,"cve_count":11,"kev_count":11,"has_kev":16},{"version":171,"cve_count":11,"kev_count":11,"has_kev":16},{"version":173,"cve_count":11,"kev_count":11,"has_kev":16},{"version":175,"cve_count":11,"kev_count":11,"has_kev":16},{"version":177,"cve_count":165,"kev_count":11,"has_kev":16},{"version":179,"cve_count":11,"kev_count":11,"has_kev":16},{"version":181,"cve_count":11,"kev_count":11,"has_kev":16},{"version":183,"cve_count":11,"kev_count":11,"has_kev":16},{"version":185,"cve_count":11,"kev_count":11,"has_kev":16},{"version":187,"cve_count":11,"kev_count":11,"has_kev":16},{"version":189,"cve_count":165,"kev_count":11,"has_kev":16},{"version":191,"cve_count":11,"kev_count":11,"has_kev":16},{"version":193,"cve_count":11,"kev_count":11,"has_kev":16},{"version":195,"cve_count":11,"kev_count":11,"has_kev":16},{"version":197,"cve_count":11,"kev_count":11,"has_kev":16},{"version":199,"cve_count":11,"kev_count":11,"has_kev":16},{"version":201,"cve_count":11,"kev_count":11,"has_kev":16},{"version":203,"cve_count":11,"kev_count":11,"has_kev":16},{"version":205,"cve_count":11,"kev_count":11,"has_kev":16},{"version":207,"cve_count":11,"kev_count":11,"has_kev":16},{"version":209,"cve_count":11,"kev_count":11,"has_kev":16},{"version":211,"cve_count":11,"kev_count":11,"has_kev":16},{"version":213,"cve_count":11,"kev_count":11,"has_kev":16},{"version":215,"cve_count":11,"kev_count":11,"has_kev":16},{"version":217,"cve_count":11,"kev_count":11,"has_kev":16},{"version":219,"cve_count":11,"kev_count":11,"has_kev":16},{"version":221,"cve_count":11,"kev_count":11,"has_kev":16},{"version":223,"cve_count":11,"kev_count":11,"has_kev":16},{"version":225,"cve_count":11,"kev_count":11,"has_kev":16},{"version":227,"cve_count":11,"kev_count":11,"has_kev":16},{"version":229,"cve_count":11,"kev_count":11,"has_kev":16},{"version":231,"cve_count":11,"kev_count":11,"has_kev":16},{"version":233,"cve_count":11,"kev_count":11,"has_kev":16},{"version":235,"cve_count":11,"kev_count":11,"has_kev":16},{"version":237,"cve_count":11,"kev_count":11,"has_kev":16},{"version":239,"cve_count":11,"kev_count":11,"has_kev":16},{"version":241,"cve_count":11,"kev_count":11,"has_kev":16},{"version":243,"cve_count":11,"kev_count":11,"has_kev":16},{"version":245,"cve_count":11,"kev_count":11,"has_kev":16},{"version":247,"cve_count":11,"kev_count":11,"has_kev":16},{"version":249,"cve_count":11,"kev_count":11,"has_kev":16},{"version":251,"cve_count":11,"kev_count":11,"has_kev":16},{"version":253,"cve_count":11,"kev_count":11,"has_kev":16},{"version":255,"cve_count":11,"kev_count":11,"has_kev":16},{"version":257,"cve_count":11,"kev_count":11,"has_kev":16},{"version":259,"cve_count":11,"kev_count":11,"has_kev":16},{"version":261,"cve_count":11,"kev_count":11,"has_kev":16},{"version":263,"cve_count":11,"kev_count":11,"has_kev":16},{"version":265,"cve_count":11,"kev_count":11,"has_kev":16},{"version":267,"cve_count":11,"kev_count":11,"has_kev":16},{"version":269,"cve_count":11,"kev_count":11,"has_kev":16},{"version":271,"cve_count":11,"kev_count":11,"has_kev":16},{"version":273,"cve_count":11,"kev_count":11,"has_kev":16},{"version":275,"cve_count":11,"kev_count":11,"has_kev":16},{"version":277,"cve_count":11,"kev_count":11,"has_kev":16},{"version":279,"cve_count":11,"kev_count":11,"has_kev":16},{"version":281,"cve_count":11,"kev_count":11,"has_kev":16},{"version":283,"cve_count":11,"kev_count":11,"has_kev":16},[421,429,436,442,447,452,457,461,466,471],{"cveId":422,"description":423,"publishedDate":424,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":428},"CVE-2023-6909","Path Traversal: '\\..\\filename' in GitHub repository mlflow\u002Fmlflow prior to 2.9.2.","2023-12-18",7.5,"v3.1","High",0.89716,{"cveId":430,"description":431,"publishedDate":432,"cvssScore":433,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":435},"CVE-2023-3765","Absolute Path Traversal in GitHub repository mlflow\u002Fmlflow prior to 2.5.0.","2023-07-19",10,"Critical",0.70736,{"cveId":437,"description":438,"publishedDate":439,"cvssScore":440,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":441},"CVE-2023-1177","Path Traversal: '\\..\\filename' in GitHub repository mlflow\u002Fmlflow prior to 2.2.1.\n\n","2023-03-24",9.8,0.69468,{"cveId":443,"description":444,"publishedDate":445,"cvssScore":440,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":446},"CVE-2023-6018","An attacker can overwrite any file on the server hosting MLflow without any authentication.","2023-11-16",0.47874,{"cveId":448,"description":449,"publishedDate":450,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":451},"CVE-2024-3848","A path traversal vulnerability exists in mlflow\u002Fmlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.","2024-05-16",0.43284,{"cveId":453,"description":454,"publishedDate":455,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":456},"CVE-2023-43472","An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.","2023-12-05",0.36582,{"cveId":458,"description":459,"publishedDate":12,"cvssScore":440,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":460},"CVE-2025-11201","MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.",0.27133,{"cveId":462,"description":463,"publishedDate":464,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":465},"CVE-2024-2928","A Local File Inclusion (LFI) vulnerability was identified in mlflow\u002Fmlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '..\u002F'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '\u002Fetc\u002Fpasswd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.","2024-06-06",0.21847,{"cveId":467,"description":468,"publishedDate":469,"cvssScore":440,"cvssVersion":426,"severity":434,"isKev":16,"epssScore":470},"CVE-2023-2780","Path Traversal: '\\..\\filename' in GitHub repository mlflow\u002Fmlflow prior to 2.3.1.","2023-05-17",0.06311,{"cveId":472,"description":473,"publishedDate":445,"cvssScore":425,"cvssVersion":426,"severity":427,"isKev":16,"epssScore":474},"CVE-2023-6015","MLflow allowed arbitrary files to be PUT onto the server.",0.04408,[],{"title":477,"metaDescription":478,"keywords":479,"structuredData":480},"Mlflow by Lfprojects - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Mlflow by Lfprojects covering 134 versions with 53 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Mlflow vulnerabilities, Mlflow security, Mlflow CVE, Lfprojects Mlflow, Mlflow threat intelligence, Lfprojects security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":481,"@type":482,"name":483,"description":478,"url":484,"manufacturer":485,"applicationCategory":489,"softwareVersion":490,"mainEntity":491},"https:\u002F\u002Fschema.org","SoftwareApplication","Mlflow","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Flfprojects\u002Fmlflow",{"@type":486,"name":487,"url":488},"Organization","Lfprojects","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Flfprojects","Security Software","134 versions tracked",{"@type":492,"name":493,"description":494,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Mlflow Security Vulnerabilities","Security vulnerabilities affecting Mlflow by Lfprojects",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":496,"apiVersion":497},"2026-10-28T18:23:27.970Z","3.0",{"rows":499,"total":11,"capped":16,"failed":11},[],[]]