Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6014

Fixed upstream EPSS 1%CVSS 9.1

An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirment.

Published 2023-11-16 · CVE record · OSV

Products: mlflow/mlflow, mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.8.0