~ / search / GHSA-ffw3-6378-cqgp

GHSA-ffw3-6378-cqgp

mlflow vulnerable to OS Command Injection

Source: GitHub Advisory Database (reviewed) High CVE-2023-4033

Packages

EcosystemPackageAffectedFixed in
PyPI mlflow < 2.6.0 2.6.0

Details

As written in the advisory (Markdown source, shown as plain text).

OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.

References

External links from the advisory. They lead to third-party sites.