VDB
Sign up
HIGH7.5

PYSEC-2023-68

Quick fix

PYSEC-2023-68 — mlflow: upgrade to the fixed version with the command below.

pip install --upgrade 'mlflow>=f73147496e05c09a8b83d95fb4f1bf86696c6342'

Details

Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/mlflow
Introduced in: 0Fixed in: f73147496e05c09a8b83d95fb4f1bf86696c6342
Fixpip install --upgrade 'mlflow>=f73147496e05c09a8b83d95fb4f1bf86696c6342'

References