mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function tempfile.mktemp()
is deprecated and mkstemp()
should be used instead.
{ "nvd_published_at": "2022-02-23T09:15:00Z", "cwe_ids": [ "CWE-377", "CWE-668" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2022-02-24T21:42:26Z" }