mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp() is deprecated and mkstemp() should be used instead.
tempfile.mktemp()
mkstemp()
{ "affected_functions": [ "mlflow.utils.file_utils.make_tarfile", "mlflow.projects.docker._create_docker_build_ctx" ] }