{"action":"Upgrade mlflow to 3.9.0 or later.","affected":[{"fixed":"3.9.0","introduced":"0"}],"component":"mlflow","cve_ids":["CVE-2026-2393"],"ecosystem":"PyPI","epss":0.00288,"exploited":false,"fixed_versions":["3.9.0"],"ghsa_id":"GHSA-65h7-c7c4-mghx","id":"tcs_01M5KGY5TN1M7392PTSRXAT2RA","modified_at":"2026-07-13T16:45:08.114491424Z","published_at":"2026-05-11T18:16:31.500Z","references":["https://osv.dev/vulnerability/PYSEC-2026-2219","https://github.com/mlflow/mlflow/commit/64aa0ab7207f9c649b59ba1a5f40d82196817389","https://huntr.com/bounties/04ef100d-06b5-4a70-95b1-b7be23aa8150","https://github.com/advisories/GHSA-65h7-c7c4-mghx"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"PYSEC-2026-2219","url":"https://osv.dev/vulnerability/PYSEC-2026-2219"}],"summary":"A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter w"}