Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-6975

Fixed upstream EPSS 2%CVSS 9.8

A malicious user could use this issue to get command execution on the vulnerable machine and get access to data & models information.

Published 2023-12-20 · CVE record · OSV

Products: mlflow/mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow2.9.2