{"action":"Upgrade mlflow to 2.2.1 or later.","affected":[{"fixed":"2.2.1","introduced":"0"}],"component":"mlflow","cve_ids":["CVE-2023-1177"],"ecosystem":"PyPI","epss":0.6968,"exploited":false,"fixed_versions":["2.2.1"],"ghsa_id":"GHSA-xg73-94fp-g449","id":"tcs_01M5KGKBC47V96202J0PTCFC8Y","modified_at":"2026-06-10T17:02:07.547735860Z","published_at":"2023-03-24T15:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2023-29","https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28","https://github.com/mlflow/mlflow/commit/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e","https://github.com/advisories/GHSA-xg73-94fp-g449"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2023-29","url":"https://osv.dev/vulnerability/PYSEC-2023-29"}],"summary":"Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.2.1."}