MLflow

Mentions · 7d0
Mentions · 30d0
All mentions1
First seenSep 16, 2026
Last mentionedSep 16, 2026

Timeline

1 articles · newest first

VU#369093: MLflow dspy and statsmodels flavors bypass pickle deserialization control

CERT/CC warns MLflow's dspy and statsmodels flavors bypass the MLFLOW_ALLOW_PICKLE_DESERIALIZATION control, enabling remote code execution.

CERT/CC Vulnerability NotesSep 16, 17:10 UTC · Sep 16, 2026Vulnerability3 · 1 read

Appears with

CERT/CCorganization · 1
MLflowproduct · 1

Entities are extracted by the model from each article. First seen Sep 16, 2026, last mentioned Sep 16, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.