p PatchFirst

PatchFirst · Aktuelle Sicherheitslücken

Sicherheitslücken in ml-logger

In den letzten 30 Tagen veröffentlichte Sicherheitslücken für ml-logger: 0. Davon im KEV-Katalog: 0.

Sicherheitslücken filtern
Filter zurücksetzen

Sicherheitslücken: 3

  1. CVE-2025-10952

    Mittel · CVSS 6.9EPSS 0,54%Keine Korrektur veröffentlicht

    geyang ml-logger File server.py stream_handler information disclosure

    A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function stream_handler of the file ml_logger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

    Veröffentlicht Aktualisiert
  2. CVE-2025-10951

    Mittel · CVSS 6.9EPSS 0,73%Keine Korrektur veröffentlicht

    geyang ml-logger server.py log_handler path traversal

    A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function log_handler of the file ml_logger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

    Veröffentlicht Aktualisiert
  3. CVE-2025-10950

    Mittel · CVSS 5.3EPSS 0,39%Keine Korrektur veröffentlicht

    geyang ml-logger Ping server.py log_handler deserialization

    A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function log_handler of the file ml_logger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.

    Veröffentlicht Aktualisiert

Prüfen Sie Ihren Server

Gleichen Sie Ihren installierten Stack und seine Versionen mit den aktuellen Sicherheitsmeldungen ab.

Prüfen Sie Ihren Server →