WS-2026-0135

mlflow 3.12.0rc0 - 3.16.1: third-party scorer deserialization allow-lists modules by package prefix, so an unauthenticated caller can upload a run artifact under an allowed scorer package and have the server import and execute it remote code execution GHSA-26p8-2jq9-3vq9...