Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6709

Fixed upstream EPSS <1%CVSS 10.0

Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.

Published 2023-12-12 · CVE record · OSV

Products: mlflow/mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.9.2
PyPImlflow432b8ccf27fd3a76df4ba79bb1bec62118a85625