evidently vulnerabilities

CVEs whose affected-version data names the evidently package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-75111High· 7.5

1mo ago

Evidently UI Path Traversal via Dataset Materialization Filename

Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences …

▾ Twilightevidentlyai · evidentlyEPSS 0.39%via CVEORG