Vulnerabilities for clearml

First version without a known vulnerability: 2.0.2

Details

• GHSA-579p-qf78-fqm22025-10-05

  clearml is vulnerable to Path Traversal through its `safe_extract` function

  Fixed in: 2.0.2

• GHSA-m95h-p4gg-wfw32024-02-06

  Allegro AI ClearML path traversal vulnerability

  Fixed in: 1.14.2

• GHSA-cpcw-9h9m-wqw92024-02-06

  Allegro AI ClearML vulnerable to deserialization of untrusted data

  Fixed in: 1.14.3rc0

• GHSA-gvqv-h7hh-6fcc2024-02-06

  Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance