VDB
KO
CRITICAL 10.0

PYSEC-2023-308

Details

Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI / mlflow
Introduced in: 0 Fixed in: 6dde93758d42455cb90ef324407919ed67668b9b
Fix pip install --upgrade 'mlflow>=6dde93758d42455cb90ef324407919ed67668b9b'

References