Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6909

Fixed upstream EPSS 90%CVSS 7.5

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Published 2023-12-18 · CVE record · OSV

Products: mlflow/mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.9.2
PyPImlflow1da75dfcecd4d169e34809ade55748384e8af6c1