Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-2780

Fixed upstream EPSS 6%CVSS 9.8

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.

Published 2023-05-17 · CVE record · OSV

Products: mlflow/mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.3.0
PyPImlflowfae77a525dd908c56d6204a4cef1c1c75b4e9857
PyPImlflow2.3.1