https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 23:45:08 +0000 https://cve.radiocsirt.org/vuln/bit-mlflow-2024-37059 <p><strong>Affected:</strong> Bitnami: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> <p><strong>Affected:</strong> Bitnami: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> https://cve.radiocsirt.org/vuln/bit-mlflow-2024-37059 https://cve.radiocsirt.org/vuln/euvd-2026-5795 EUVD-2026-5795 https://cve.radiocsirt.org/vuln/euvd-2026-5795 https://cve.radiocsirt.org/vuln/fkie_cve-2024-37059 <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-37059 https://cve.radiocsirt.org/vuln/ghsa-wf7f-8fxf-xfxc <p><strong>Affected:</strong> PyPI: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> <p><strong>Affected:</strong> PyPI: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> https://cve.radiocsirt.org/vuln/ghsa-wf7f-8fxf-xfxc https://cve.radiocsirt.org/vuln/pysec-2026-1660 <p><strong>Affected:</strong> PyPI: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> <p><strong>Affected:</strong> PyPI: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.</p> https://cve.radiocsirt.org/vuln/pysec-2026-1660