VulnWatch VulnWatch
← Back to dashboard
Medium osv · GHSA-vqj2-4v8m-8vrq

Insecure Temporary File in mlflow

Published Feb 24, 2022 CVSS 4.0

mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp() is deprecated and mkstemp() should be used instead.

Affected AI Products

mlflow
Get the weekly digest. Every Monday: top AI security stories of the week. Free.