{"action":"Upgrade mlflow to 2.9.2 or later.","affected":[{"fixed":"2.9.2","introduced":"0"}],"component":"mlflow","cve_ids":["CVE-2023-6975"],"ecosystem":"PyPI","epss":0.0203,"exploited":false,"fixed_versions":["2.9.2"],"ghsa_id":"GHSA-hh8p-p8mp-gqhm","id":"tcs_01M5KFKPD3PB02GZB3C20DRVXD","modified_at":"2026-06-29T12:26:16.656472599Z","published_at":"2023-12-20T06:30:25Z","references":["https://osv.dev/vulnerability/GHSA-hh8p-p8mp-gqhm","https://nvd.nist.gov/vuln/detail/CVE-2023-6975","https://github.com/mlflow/mlflow/commit/b9ab9ed77e1deda9697fe472fb1079fd428149ee","https://github.com/mlflow/mlflow","https://huntr.com/bounties/029a3824-cee3-4cf1-b260-7138aa539b85"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hh8p-p8mp-gqhm","url":"https://osv.dev/vulnerability/GHSA-hh8p-p8mp-gqhm"}],"summary":"MLFlow Path Traversal Vulnerability"}