Tools / mlflow / Security

Security Deep Dive

mlflow

Security posture and CVE patch evidence from tracked releases.

Back to Tool

19 critical dependency CVEs affects v3.14.0.

Audit transitive dependencies; consider upgrading or pinning replacements.

Versions by Severity

CVEs are attributed to tracked releases published before the patch release.

8 versions tracked

Version	Published	C	H	M	L	KEV	Notes
v3.14.0	2026-06-17	—	—	—	—	—	Latest
ts/v0.2.0	2026-05-15	—	—	—	—	—	Patches CVE-2023-4863 Patches CVE-2026-42208 Patches CVE-2026-42271
v3.12.0	2026-05-05	1	2	—	—	KEV 3	—
v3.11.1	2026-04-08	1	2	—	—	KEV 3	—
model-catalog/latest	2026-04-06	1	2	—	—	KEV 3	—
v3.10.1	2026-03-05	1	2	—	—	KEV 3	—
v3.10.0	2026-02-20	1	2	—	—	KEV 3	—
v3.9.0	2026-01-29	1	2	—	—	KEV 3	—

— Signed — SLSA — SBOM ✓ Security policy Monthly cadence · 22d median Active maintainer

Trust Signals — 3 of 9 Present

Evidence already collected from releases and repository metadata.

3/9 Present

Signed releases Unknown

Latest release artifact signature Latest release

—

SLSA provenance Unknown

Attestation predicate level Latest release

—

SBOM published Unknown

GitHub SBOM API Latest release

—

SECURITY.md Present

GitHub repository metadata Repository policy

Checked: 13d ago

Release cadence: monthly Present

22d median over recent releases Release history

Latest release: 1mo ago

Maintainer active Present

Recent commit activity Repository

Last commit: 10d ago

Checksums (SHA256SUMS) Not active yet

SHA256SUMS or equivalent Release asset

Latest release: 1mo ago

GitHub Actions attestation Not active yet

actions/attest-build-provenance Workflow file

Latest release: 1mo ago

Signing assets Not active yet

.sig, .crt, cosign.pub, or similar Release asset

Latest release: 1mo ago

0.7/10 Security Score

5.4/10 Scorecard

Dependency Exposure 110 transitive dependency CVEs found in the latest SBOM. 19 critical.

Security Score

A composite score aggregating Scorecard performance, CVE patch history, OpenSSF badge tier, and dependency vulnerability exposure. Score ≥ 7.0 is healthy; < 4.0 warrants attention.

epss

0.00 / 0.5

Max EPSS 0.997

freshness

1.00 / 1.0

3d stale

scorecard

2.16 / 4.0

Score 5.4/10

cve health

0.00 / 2.5

No open CVEs

patch speed

0.50 / 0.5

⚠ Estimated — no CVE patch history

kev exposure

-1.50 / 1.5

KEV exposure detected

supply chain risk

-1.50 / 10.0

Risk 100.0/100

Score breakdown

schema v2

Vulnerability posture

vulnerability posture

0.0

25%

direct cves: clear cve scan: available

Release responsiveness

release responsiveness

10.0

patch speed days: no_history

Dependency exposure

dependency exposure

0.0

10%

supply chain risk: 100.0 transitive cves: 95c/285h

Provenance trust

provenance trust

5.4

40%

scorecard score: 5.4 openssf badge: none

Maintainer health

maintainer health

10.0

10%

activity freshness: 3d

Operational risk

operational risk

0.0

10%

kev exposure: detected epss max: 0.997

How is this calculated?

The six dimensions group the legacy score signals into weighted categories: direct vulnerability status, patch responsiveness, dependency exposure, provenance checks, maintainer activity, and exploitability risk. The flat component values above remain available for compatibility.

Supply Chain Risk

Risk 100.0/100

19 Transitive critical CVEs

0 KEV-transitive CVEs

43% Dependency freshness

Scorecard

Scorecard 5.4/10

OpenSSF Scorecard evaluates supply-chain security practices automatically. Score ≥ 6 is passing; ≥ 8 is excellent.

Check	Score	Reason
Code-Review	8	Found 26/30 approved changesets -- score normalized to 8
Maintained	10	30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices	0	no effort to earn an OpenSSF best practices badge detected
Security-Policy	10	security policy file detected
License	10	license file detected
Signed-Releases	0	Project has not signed or included provenance with any releases.
Dangerous-Workflow	0	dangerous workflow patterns detected
Branch-Protection	3	branch protection is not maximal on development and all release branches
Pinned-Dependencies	-1	internal error: internal error: invalid Dockerfile
Token-Permissions	10	GitHub workflow tokens follow principle of least privilege
Packaging	10	packaging workflow detected
SAST	0	SAST tool is not run on all commits -- score normalized to 0
Binary-Artifacts	10	no binaries found in the repo
Fuzzing	0	project is not fuzzed

OpenSSF Badge

OpenSSF none

Badge indicates adherence to open-source best practices.

CVE Patch History

Tracks CVEs that were addressed in tagged releases. Shorter gap between disclosure and patch = faster response. EPSS = predicted probability of exploitation in next 30 days (FIRST.org); colored at ≥90%ile and ≥50%ile.

CVEs Patched by Year

Critical High Medium Low

2026

CVE	Severity	EPSS	Disclosed	Fixed in	Days to fix	vs Ecosystem Median	KEV
CVE-2023-4863	HIGH	99%ile	—	ts/v0.2.0	—	—	KEV
CVE-2026-42208	CRITICAL	99%ile	—	ts/v0.2.0	—	—	KEV
CVE-2026-42271	HIGH	99%ile	—	ts/v0.2.0	—	—	KEV

KEV = CISA Known Exploited Vulnerabilities catalog — actively exploited in the wild.

Dependency Vulnerabilities

6495 dependencies scanned View full dependency list →

Scanning the SBOM (Software Bill of Materials) of the latest release for known vulnerabilities in transitive dependencies.

Critical

High

Medium

Low

Unknown

Still affecting latest (110) All (500)

Critical 19 High 74 Medium 17

CVE	Severity	KEV	Dependency	Affected version	Cleared in release
CVE-2023-45311	critical	—	fsevents	1.2.9	v3.14.0
CVE-2023-46308	critical	—	plotly.js	2.5.1	v3.14.0
CVE-2023-6014	critical	—	mlflow	2.7.1	v3.14.0
CVE-2023-6015	critical	—	mlflow	2.7.1	v3.14.0
CVE-2023-6018	critical	—	mlflow	2.8.1	v3.14.0
CVE-2023-6831	critical	—	mlflow	2.8.1	v3.14.0
CVE-2023-6974	critical	—	mlflow	2.8.1	v3.14.0
CVE-2023-6975	critical	—	mlflow	2.8.1	v3.14.0
CVE-2024-0520	critical	—	mlflow	2.8.1	v3.14.0
CVE-2024-27132	critical	—	mlflow	2.8.1	v3.14.0
CVE-2024-27133	critical	—	mlflow	2.8.1	v3.14.0
CVE-2024-3573	critical	—	mlflow	2.8.1	v3.14.0
CVE-2025-15036	critical	—	mlflow	2.12.2	v3.14.0
CVE-2025-15379	critical	—	mlflow	2.12.2	v3.14.0
CVE-2025-6545	critical	—	pbkdf2	3.0.17	v3.14.0
CVE-2025-6547	critical	—	pbkdf2	3.0.17	v3.14.0
CVE-2025-9287	critical	—	cipher-base	1.0.4	v3.14.0
CVE-2026-0545	critical	—	mlflow	2.12.2	v3.14.0
CVE-2026-2635	critical	—	mlflow	2.12.2	v3.14.0
CVE-2020-7753	high	—	trim	0.0.1	v3.14.0
CVE-2021-33623	high	—	trim-newlines	1.0.0	v3.14.0
CVE-2021-3803	high	—	nth-check	1.0.2	v3.14.0
CVE-2022-23647	high	—	prismjs	1.25.0	v3.14.0
CVE-2022-25887	high	—	sanitize-html	1.27.5	v3.14.0
CVE-2023-43472	high	—	mlflow	2.8.1	v3.14.0
CVE-2023-6709	high	—	mlflow	2.8.1	v3.14.0
CVE-2023-6753	high	—	mlflow	2.8.1	v3.14.0
CVE-2023-6909	high	—	mlflow	2.8.1	v3.14.0
CVE-2023-6940	high	—	mlflow	2.8.1	v3.14.0
CVE-2023-6976	high	—	mlflow	2.8.1	v3.14.0
CVE-2023-6977	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-1483	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-1558	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-1560	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-1593	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-1594	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-21536	high	—	http-proxy-middleware	1.3.1	v3.14.0
CVE-2024-27134	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-29180	high	—	webpack-dev-middleware	3.7.3	v3.14.0
CVE-2024-2928	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-29415	high	—	ip	2.0.1	v3.14.0
CVE-2024-37052	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37053	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37054	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37055	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37056	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37057	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37058	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37059	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37060	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-37061	high	—	mlflow	2.12.2	v3.14.0
CVE-2024-3848	high	—	mlflow	2.8.1	v3.14.0
CVE-2024-4068	high	—	braces	2.3.2	v3.14.0
CVE-2024-8859	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-10279	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-11200	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-11201	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-14279	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-14287	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-15031	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-15381	high	—	mlflow	2.12.2	v3.14.0
CVE-2025-54920	high	—	org.apache.spark:spark-core_2.12	3.5.0	v3.14.0
CVE-2025-54920	high	—	org.apache.spark:spark-core_2.13	3.5.0	v3.14.0
CVE-2025-59840	high	—	vega-interpreter	1.0.4	v3.14.0
CVE-2025-62727	high	—	starlette	0.46.2	v3.14.0
CVE-2026-2033	high	—	mlflow	2.12.2	v3.14.0
CVE-2026-22029	high	—	@remix-run/router	1.0.1	v3.14.0
CVE-2026-27601	high	—	underscore	1.13.6	v3.14.0
CVE-2026-29063	high	—	immutable	3.7.6	v3.14.0
CVE-2026-29074	high	—	svgo	2.8.0	v3.14.0
CVE-2026-30922	high	—	pyasn1	0.6.2	v3.14.0
CVE-2026-32141	high	—	flatted	3.3.3	v3.14.0
CVE-2026-33079	high	—	mistune	3.2.0	v3.14.0
CVE-2026-33228	high	—	flatted	3.4.1	v3.14.0
CVE-2026-33671	high	—	picomatch	2.3.1	v3.14.0
CVE-2026-33891	high	—	node-forge	1.3.3	v3.14.0
CVE-2026-33894	high	—	node-forge	1.3.3	v3.14.0
CVE-2026-33895	high	—	node-forge	1.3.3	v3.14.0
CVE-2026-33896	high	—	node-forge	1.3.3	v3.14.0
CVE-2026-34601	high	—	@xmldom/xmldom	0.8.11	v3.14.0
CVE-2026-41672	high	—	@xmldom/xmldom	0.8.11	v3.14.0
CVE-2026-41673	high	—	@xmldom/xmldom	0.8.11	v3.14.0
CVE-2026-41674	high	—	@xmldom/xmldom	0.8.11	v3.14.0
CVE-2026-41675	high	—	@xmldom/xmldom	0.8.11	v3.14.0
CVE-2026-42215	high	—	gitpython	3.1.46	v3.14.0
CVE-2026-42561	high	—	python-multipart	0.0.26	v3.14.0
CVE-2026-44243	high	—	gitpython	3.1.47	v3.14.0
CVE-2026-44244	high	—	gitpython	3.1.47	v3.14.0
CVE-2026-44307	high	—	mako	1.3.11	v3.14.0
CVE-2026-4867	high	—	path-to-regexp	0.1.12	v3.14.0
CVE-2026-6321	high	—	fast-uri	3.1.0	v3.14.0
CVE-2026-6322	high	—	fast-uri	3.1.0	v3.14.0
GHSA-36jr-mh4h-2g58	high	—	d3-color	1.4.1	v3.14.0
CVE-2019-25225	medium	—	sanitize-html	1.27.5	v3.14.0
CVE-2021-26539	medium	—	sanitize-html	1.27.5	v3.14.0
CVE-2021-26540	medium	—	sanitize-html	1.27.5	v3.14.0
CVE-2023-6568	medium	—	mlflow	2.8.1	v3.14.0
CVE-2024-1899	medium	—	showdown	1.9.1	v3.14.0
CVE-2024-21501	medium	—	sanitize-html	1.27.5	v3.14.0
CVE-2024-22195	medium	—	jinja2	3.0.3	v3.14.0
CVE-2024-2965	medium	—	langchain	0.1.20	v3.14.0
CVE-2024-3099	medium	—	mlflow	2.8.1	v3.14.0
CVE-2024-34064	medium	—	jinja2	3.0.3	v3.14.0
CVE-2024-4067	medium	—	micromatch	3.1.10	v3.14.0
CVE-2024-4263	medium	—	mlflow	2.8.1	v3.14.0
CVE-2024-5206	medium	—	scikit-learn	1.0.2	v3.14.0
CVE-2024-53382	medium	—	prismjs	1.25.0	v3.14.0
CVE-2024-56201	medium	—	jinja2	3.0.3	v3.14.0
CVE-2024-56326	medium	—	jinja2	3.0.3	v3.14.0
CVE-2024-6838	medium	—	mlflow	2.12.2	v3.14.0

Showing 110 of 500