CLSA-2026-1787902504

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1787902504.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1787902504
Upstream
CVE (2)
Published
2026-08-28T07:35:04Z
Modified
2026-10-15T09:48:05Z
Summary
TuxCare security update for mlflow (2 CVEs)
Details

TuxCare rebuilt mlflow to address 2 CVEs. Fixed in 2.9.1.post7+tuxcare.

Affected packages

TuxCare:PyPI / mlflow

Package

Name
mlflow
Purl
pkg:pypi/mlflow

Affected ranges

Type
ECOSYSTEM
Events
Introduced
2.9.1
Fixed
2.9.1.post7+tuxcare

Affected versions

2.*
2.9.1
2.9.1.post1+tuxcare
2.9.1.post2+tuxcare
2.9.1.post3+tuxcare
2.9.1.post4+tuxcare
2.9.1.post5+tuxcare
2.9.1.post6+tuxcare

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1787902504.json"
tuxcare 
{
    "base_version": "2.9.1",
    "fixed_version": "2.9.1.post7+tuxcare"
}