Patchwire CVEs, their patch status, and feeds to follow them

CVE-2025-52967

Fixed upstream EPSS <1%CVSS 5.8

gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.

Published 2025-06-23 · CVE record · OSV

Products: lfprojects mlflow

Fixed upstream

EcosystemPackageFixed in
PyPImlflow3.1.0
PyPImlflow2.22.2
PyPImlflow39a419b4ec8fd11b59b3e50ab397042a490f2324