MEDIUM5.8PyPI
GHSA-579p-qf78-fqm2· CVE-2025-8917, PYSEC-2026-1255clearml is vulnerable to Path Traversal through its `safe_extract` function
Modified: 7/7/2026
package
PyPI/clearml
pkg:pypi/clearml
HIGH8.8PyPI
GHSA-cpcw-9h9m-wqw9· CVE-2024-24590, PYSEC-2026-1256Allegro AI ClearML vulnerable to deserialization of untrusted data
Modified: 7/7/2026
MEDIUM6.0PyPI
GHSA-gvqv-h7hh-6fcc· CVE-2024-24595, PYSEC-2026-1257Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance
Modified: 7/7/2026
HIGH8.8PyPI
GHSA-m95h-p4gg-wfw3· CVE-2024-24591, PYSEC-2026-1258Allegro AI ClearML path traversal vulnerability
Modified: 7/7/2026
MEDIUM5.8PyPI
PYSEC-2026-1255· CVE-2025-8917, GHSA-579p-qf78-fqm2clearml is vulnerable to Path Traversal through its `safe_extract` function
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-1256· CVE-2024-24590, GHSA-cpcw-9h9m-wqw9Allegro AI ClearML vulnerable to deserialization of untrusted data
Modified: 7/7/2026
MEDIUM6.0PyPI
PYSEC-2026-1257· CVE-2024-24595, GHSA-gvqv-h7hh-6fccAllegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance
Modified: 7/7/2026
HIGH8.8PyPI
PYSEC-2026-1258· CVE-2024-24591, GHSA-m95h-p4gg-wfw3Allegro AI ClearML path traversal vulnerability
Modified: 7/7/2026