PyPI/mlflow: critical

Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs

Action: Upgrade mlflow to 2.3.1 or later.

pip install mlflow==2.3.1

Affected

Fixed versions

Sources

• osv: GHSA-83fm-w79m-64r5
• https://github.com/mlflow/mlflow/security/advisories/GHSA-83fm-w79m-64r5
• https://github.com/mlflow/mlflow

published 2023-05-01T13:43:58Z · modified 2024-11-28T05:40:42.701104Z · JSON