MLflow

MLflow Pickle-Safety Guard Bypassed via statsmodels Flavor, Enabling RCE

Critical Unauthenticated SSRF in MLflow Webhooks Patched in 3.15.0

MLflow Patches Auth Bypass in LogInputs Endpoint (CVE-2026-69146)

MLflow Patches High-Severity Auth Bypass in CreateModelVersion (CVE-2026-69148)