Description
Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| mlflow | mlflow/mlflow | unspecified – < 2.2.2 | 2.2.2 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | mlflow | < 2.2.1 | 2.2.1 | GHSA-wp72-7hj9-5265 |
| PyPI | mlflow | < 2.2.2 | 2.2.2 | PYSEC-2023-28 |