MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks
Moderate severity
GitHub Reviewed
Published
May 21, 2026
to the GitHub Advisory Database
•
Updated Jun 12, 2026
Give feedback on Dependabot alerts