Loading HuntDB...

GHSA-5r3q-93q3-f978

GitHub Security Advisory

MLflow Path Traversal Vulnerability

✓ GitHub Reviewed HIGH Has CVE

Advisory Details

Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.

Affected Packages

PyPI mlflow
Affected versions: 0 (fixed in 2.9.2)

Related CVEs

Key Information

GHSA ID
GHSA-5r3q-93q3-f978
Published
December 20, 2023 6:30 AM
Last Modified
September 24, 2024 9:25 PM
CVSS Score
7.5 /10
Primary Ecosystem
PyPI
Primary Package
mlflow
GitHub Reviewed
✓ Yes

Dataset

Last updated: September 16, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.