CVE-2025-1473
2 advisories.
PyPI/mlflow CVE-2025-1473: medium 5.4
MLflow Cross-Site Request Forgery (CSRF) vulnerability
Action: Upgrade mlflow to 2.20.3 or later.
pip install mlflow==2.20.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.17.0 | 2.20.3 | - |
Fixed versions
| 2.20.3 |
Sources
- osv: GHSA-969w-gqqr-g6j3
- https://nvd.nist.gov/vuln/detail/CVE-2025-1473
- https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628
- https://github.com/mlflow/mlflow
- https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45
CVE-2025-1473 · published · modified · JSON
PyPI/mlflow CVE-2025-1473: medium 5.4
MLflow Cross-Site Request Forgery (CSRF) vulnerability
Action: Upgrade mlflow to 2.20.3 or later.
pip install mlflow==2.20.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.17.0 | 2.20.3 | - |
Fixed versions
| 2.20.3 |
Sources
- osv: PYSEC-2026-1646
- https://nvd.nist.gov/vuln/detail/CVE-2025-1473
- https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628
- https://github.com/mlflow/mlflow
- https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45
- https://pypi.org/project/mlflow
- https://github.com/advisories/GHSA-969w-gqqr-g6j3
CVE-2025-1473 · published · modified · JSON