AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

ClearML security advisories

4 advisories · none critical or high in 12 months · latest Oct 5, 2025

Repository

4 advisories

Medium 5.8Oct 5, 2025clearml is vulnerable to Path Traversal through its `safe_extract` functionCVE-2025-8917fixed in 2.0.2High 8.8Feb 6, 2024Allegro AI ClearML path traversal vulnerabilityCVE-2024-24591no fix yetHigh 8.8Feb 6, 2024Allegro AI ClearML vulnerable to deserialization of untrusted dataCVE-2024-24590no fix yetMedium 6.0Feb 6, 2024Allegro AI ClearML Stores Credentials in Plaintext in MongoDB InstanceCVE-2024-24595no fix yet
About ClearML

Experiment tracking, orchestration and serving.

Packages watched: clearml (PyPI).

clearml/clearmlClearML