Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2024-24590

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-cpcw-9h9m-wqw9

Allegro AI ClearML vulnerable to deserialization of untrusted data Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

gitlab/pypi/clearml/CVE-2024-24590

Deserialization of Untrusted Data Deserialization of untrusted data can occur in version 0.17.0 or newer of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

pypa/clearml/PYSEC-2026-1256

Allegro AI ClearML vulnerable to deserialization of untrusted data Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.

pysec/PYSEC-2026-1256

Allegro AI ClearML vulnerable to deserialization of untrusted data Deserialization of untrusted data can occur in versions 0.17.0 to 1.14.2 of the client SDK of Allegro AI’s ClearML platform, enabling a maliciously uploaded artifact to run arbitrary code on an end user’s system when interacted with.