Staging Environment: Content and features may be unstable or change without notice.

Advisory Severity Curation

CVE-2024-24595

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-gvqv-h7hh-6fcc

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

gitlab/pypi/clearml/CVE-2024-24595

Insufficiently Protected Credentials Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

pypa/clearml/PYSEC-2026-1257

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

pysec/PYSEC-2026-1257

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.