a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +143 more potentially affected by CVE-2023-30172 via mlflow (>=0.8.2 <=1.9.1)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =3.0.0, =0.1.0, =0.3.5, =0.8.0, =0.0.4, =0.0.7 and more Source cves: CVE-2023-30172 Source advisory: OSV:GHSA-WC6J-5G83-XFM6...

a2 (>=0.1.0 <=0.3.17), agentos (>=0.0.5 <=0.0.7) +146 more potentially affected by CVE-2023-30172 via mlflow (>=0.8.2 <=2.0.0rc0)

mlflow PYPI version =0.8.2, =0.1.0, =0.0.5, =0.1.2, =1.0.18.2, =0.0.1, =1.0.41, =1.4.0, =0.2.5, =3.0.0, =0.1.0, =0.3.5, =0.8.0, =0.0.4, =0.0.7 and more Source cves: CVE-2023-30172 Source advisory: OSV:PYSEC-2023-70...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +321 more potentially affected by CVE-2023-2356 via mlflow (>=0.8.2 <=2.3.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-2356 Source advisory: OSV:GHSA-X422-6QHV-P29G...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +321 more potentially affected by CVE-2023-2356 via mlflow (>=0.8.2 <=2.3.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-2356 Source advisory: OSV:PYSEC-2023-68...

Mlflow 安全漏洞

Mlflow is an open source platform for machine learning lifecycles. A security vulnerability exists in Mlflow versions prior to 2.3.1. An attacker exploiting this vulnerability could access files and directories stored outside of the web root folder...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +318 more potentially affected by CVE-2023-1177 via mlflow (>=0.8.2 <=2.22.5)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-1177 Source advisory: OSV:PYSEC-2023-29...

autorad (=0.1.2), azureml-contrib-run (>=1.0.18.2 <=1.0.41) +48 more potentially affected by CVE-2022-0736 via mlflow (>=0.8.2 <=1.23.0)

mlflow PYPI version =0.8.2, =1.0.18.2, =1.4.0, =3.0.0, =0.0.4, =0.1.3, =0.0.8, =0.0.1, =0.4.5, =1.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2022-0736 Source advisory: OSV:GHSA-VQJ2-4V8M-8VRQ...

autorad (=0.1.2), azureml-contrib-run (>=1.0.18.2 <=1.0.41) +48 more potentially affected by CVE-2022-0736 via mlflow (>=0.8.2 <=1.23.0)

mlflow PYPI version =0.8.2, =1.0.18.2, =1.4.0, =3.0.0, =0.0.4, =0.1.3, =0.0.8, =0.0.1, =0.4.5, =1.2.0, =0.0.1, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2022-0736 Source advisory: OSV:PYSEC-2022-28...