Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-hvc6-42vf-jhf8: mlflow Command Injection vulnerability

with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.

ghsa
#vulnerability#git

mlflow Command Injection vulnerability

Critical severity GitHub Reviewed Published Dec 19, 2023 to the GitHub Advisory Database • Updated Dec 19, 2023

ghsa: Latest News

GHSA-rm76-4mrf-v9r8: vLLM uses Python 3.12 built-in hash() which leads to predictable hash collisions in prefix cache