Ecosystem	Package	Version

Vulnerabilities

sonatype-2026-000007

sonatype-2026-000007

mlflow - UNIX Symbolic Link (Symlink) Following

Published Jan 5, 2026

https://github.com/mlflow/mlflow/pull/18964

CVSS ScoreMedium

6.3

Ecosystem	Package	Version


pypi	genesis-flow	1.0.0
pypi	genesis-flow	1.0.1
pypi	genesis-flow	1.0.3
pypi	genesis-flow	1.0.4
pypi	genesis-flow	1.0.5
pypi	genesis-flow	1.0.6
pypi	genesis-flow	1.0.7
pypi	genesis-flow	1.0.8
pypi	genesis-flow	1.0.9
golang	github.com/microblink/mlflow	v1.26.0
pypi	jliang-mlflow-transformers-flavor	1.5.1.dev0
pypi	jliang-mlflow-transformers-flavor	1.5.2.dev1
pypi	jliang-mlflow-transformers-flavor	1.5.3.dev1
pypi	jliang-mlflow-transformers-flavor	1.5.4.dev1
pypi	jliang-mlflow-transformers-flavor	1.5.5.1.dev1
pypi	jliang-mlflow-transformers-flavor	1.5.5.2.dev1
pypi	jliang-mlflow-transformers-flavor	1.5.5.dev1
pypi	lmcmlflow	1.17.1.1
pypi	lmcmlflow	1.17.1.2
pypi	lmcmlflow	1.17.1
cran	mlflow	0.7.0
cran	mlflow	0.8.0
cran	mlflow	0.9.0.1
cran	mlflow	0.9.0
cran	mlflow	1.0.0
cran	mlflow	1.1.0
cran	mlflow	1.10.0
cran	mlflow	1.12.0
cran	mlflow	1.12.1
cran	mlflow	1.13.1
cran	mlflow	1.14.0
cran	mlflow	1.14.1
cran	mlflow	1.15.0
cran	mlflow	1.16.0
cran	mlflow	1.17.0
cran	mlflow	1.18.0
cran	mlflow	1.19.0
cran	mlflow	1.2.0
cran	mlflow	1.20.1
cran	mlflow	1.20.2
cran	mlflow	1.21.0
cran	mlflow	1.22.0
cran	mlflow	1.23.0
cran	mlflow	1.24.0
cran	mlflow	1.25.1
cran	mlflow	1.26.0
cran	mlflow	1.26.1
cran	mlflow	1.27.0
cran	mlflow	1.28.0
cran	mlflow	1.29.0

sonatype-2026-000007 | Components Impacted | Sonatype Guide | Sonatype Guide