HIGH7.8
PYSEC-2023-280
Quick fix
PYSEC-2023-280 — mlflow: upgrade to the fixed version with the command below.
pip install --upgrade 'mlflow>=6dde93758d42455cb90ef324407919ed67668b9b'Details
OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
Are you affected?
Enter the version of the package you're using.
Affected packages
PyPI/mlflow
Introduced in:
0Fixed in: 6dde93758d42455cb90ef324407919ed67668b9bFix
pip install --upgrade 'mlflow>=6dde93758d42455cb90ef324407919ed67668b9b'