https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 16:08:24 +0000 https://cve.radiocsirt.org/vuln/cve-2024-37058 <p><strong>Affected:</strong> MLflow, lfprojects mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.</p> <p><strong>Affected:</strong> MLflow, lfprojects mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.</p> https://cve.radiocsirt.org/vuln/cve-2024-37058 https://cve.radiocsirt.org/vuln/ghsa-cwgg-w6mp-w9hg <p><strong>Affected:</strong> PyPI: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.</p> <p><strong>Affected:</strong> PyPI: mlflow</p> <p>Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.</p> https://cve.radiocsirt.org/vuln/ghsa-cwgg-w6mp-w9hg