Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6018

Fixed upstream EPSS 48%CVSS 10.0

An attacker can overwrite any file on the server hosting MLflow without any authentication.

Published 2023-11-16 · CVE record · OSV

Products: mlflow/mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.9.2