ClearMLGHSA-gvqv-h7hh-6fcc
Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance
No fix yet
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| clearml PyPI | <= 1.14.2 | No fix yet |