CVE-2023-1176

Advisory

Openstef 3.1.1 upgrades its mlflow dependency, moving from the compatible release version of approximately 1.22.0 (=1.22.0) to approximately 1.24.0 (=1.24.0), in response to the security vulnerability CVE-2023-1176.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* Feature 187 add feature adder by BenoitHardier in https://github.com/OpenSTEF/openstef/pull/246
* Remove sonar quality gate by Davidswinkels in https://github.com/OpenSTEF/openstef/pull/306
* Update mlflow version to fix security issue by Davidswinkels in https://github.com/OpenSTEF/openstef/pull/307


**Full Changelog**: https://github.com/OpenSTEF/openstef/compare/v3.1.0...v3.1.1

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1176