ml-logger vulnerabilities
CVEs whose affected-version data names the ml-logger package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
3 CVEsRSS
CVE-2025-10952Medium· 5.3PoCml-logger file handler allows reading arbitrary files
ml-logger file handler allows reading arbitrary files
▾ Twilightml-logger · ml-loggerEPSS 0.37%via OSV
CVE-2025-10951High· 7.3PoCml-logger has path traversal in the file argument
ml-logger has path traversal in the file argument
▾ Midnightml-logger · ml-loggerEPSS 0.61%via OSV
CVE-2025-10950Medium· 6.3ml-logger deserialization vulnerability
ml-logger deserialization vulnerability
▾ Sunlitml-logger · ml-loggerEPSS 0.31%via OSV