ML
Product
mlflow/mlflow
by mlflow · last CVE Jul 2, 2026
19
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 6High 11Medium 2Low 0
Watch

Add mlflow/mlflow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-15379
10.0
2%
Mar 30
Command Injection in mlflow/mlflow
Affected: before 3.8.2
CVE-2025-15036
10.0
1%
Mar 30
Path Traversal Vulnerability in mlflow/mlflow
Affected: before 3.9.0
CVE-2026-0545
9.8
4%
Apr 3
Missing Authentication for Critical Function in mlflow/mlflow
Affected: through latest
CVE-2026-2611
9.6
0%
May 19
Improper Origin Validation in mlflow/mlflow
Affected: before 3.10.0
CVE-2025-15031
9.1
1%
Mar 18
Path Traversal Vulnerability in mlflow/mlflow
Affected: through latest
CVE-2026-2651
9.0
0%
May 25
Missing Authorization Validation in mlflow/mlflow
Affected: before 3.10.0
Showing 6