VDB
Sign up
HIGH7.5

PYSEC-2022-28

Quick fix

PYSEC-2022-28 — mlflow: upgrade to the fixed version with the command below.

pip install --upgrade 'mlflow>=61984e6843d2e59235d82a580c529920cd8f3711'

Details

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/mlflow
Introduced in: 0Fixed in: 61984e6843d2e59235d82a580c529920cd8f3711
Fixpip install --upgrade 'mlflow>=61984e6843d2e59235d82a580c529920cd8f3711'

References