| Package | Affected versions | Patched versions |
|---|---|---|
| mlflow | ≥ 1.11.0, ≤ 2.13.1 | |
| mlflow | ≥ 1.11.0 |
Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLproject to execute arbitrary code on an end user’s system when run due to unfiltered input.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free