CVE-2024-1594
2 advisories.
PyPI/mlflow CVE-2024-1594: high 7.5, EPSS 0.71%
mlflow vulnerable to Path Traversal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-m49c-5c52-6696
- https://nvd.nist.gov/vuln/detail/CVE-2024-1594
- https://github.com/mlflow/mlflow
- https://github.com/mlflow/mlflow/blob/b929a3e727dc48a1eb19b7e954b7897ac09ad3ec/mlflow/utils/uri.py#L246
- https://huntr.com/bounties/424b6f6b-e778-4a2b-b860-39730d396f3e
CVE-2024-1594 · published · modified · JSON
PyPI/mlflow CVE-2024-1594: high 7.5, EPSS 0.71%
mlflow vulnerable to Path Traversal
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.9.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1655
- https://nvd.nist.gov/vuln/detail/CVE-2024-1594
- https://github.com/mlflow/mlflow
- https://github.com/mlflow/mlflow/blob/b929a3e727dc48a1eb19b7e954b7897ac09ad3ec/mlflow/utils/uri.py#L246
- https://huntr.com/bounties/424b6f6b-e778-4a2b-b860-39730d396f3e
- https://pypi.org/project/mlflow
- https://github.com/advisories/GHSA-m49c-5c52-6696
CVE-2024-1594 · published · modified · JSON