{"id":"CGA-2w88-xrwh-f9rp","modified":"2026-01-28T03:14:26.169781Z","published":"2025-12-22T16:25:28.094574Z","withdrawn":"2026-01-28T03:14:26.169781Z","related":["CGA-2w88-xrwh-f9rp","CVE-2025-68146","GHSA-w853-jp5j-5j7f"],"affected":[{"package":{"name":"mlflow","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2w88-xrwh-f9rp.json"}},{"package":{"name":"mlflow","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2w88-xrwh-f9rp.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Chainguard","purl":"pkg:apk/chainguard/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2w88-xrwh-f9rp.json"}},{"package":{"name":"mlflow-iamguarded-compat","ecosystem":"Wolfi","purl":"pkg:apk/wolfi/mlflow-iamguarded-compat"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.8.0-r0"}]}],"database_specific":{"source":"https://packages.cgr.dev/chainguard/osv/CGA-2w88-xrwh-f9rp.json"}}],"schema_version":"1.7.3"}