← All advisories

High severity7.5NVD Advisory· Published Feb 23, 2022· Updated Jun 17, 2026

CVE-2022-0736

CVE-2022-0736

Description

Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
mlflowPyPI	< 1.23.1	1.23.1

Affected products

4

ghsa-coords2 versions
pkg:pypi/mlflow pkg:bitnami/mlflow
< 1.23.1+ 1 more
- (no CPE)range: < 1.23.1
- (no CPE)range: < 1.23.1
Mlflow/Mlflow2 versions
cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:lfprojects:mlflow:*:*:*:*:*:*:*:*range: <1.23.1
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

5

github.com/mlflow/mlflow/commit/61984e6843d2e59235d82a580c529920cd8f3711nvdPatchThird Party AdvisoryWEB
huntr.dev/bounties/e5384764-c583-4dec-a1d8-4697f4e12f75nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-vqj2-4v8m-8vrqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-0736ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/mlflow/PYSEC-2022-28.yamlghsaWEB

News mentions

0

No linked articles in our index yet.