{"id":"CLSA-2026-1774830249","summary":"TuxCare security update for mlflow (5 CVEs)","details":"TuxCare rebuilt mlflow to address 5 CVEs. Fixed in 2.9.1.post1+tuxcare.","modified":"2026-10-15T09:48:05.152908770Z","published":"2026-08-04T14:52:16Z","upstream":["CVE-2025-10279","CVE-2025-14279","CVE-2025-14287","CVE-2026-2033","CVE-2026-2635"],"affected":[{"package":{"name":"mlflow","ecosystem":"TuxCare:PyPI","purl":"pkg:pypi/mlflow"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.9.1"},{"fixed":"2.9.1.post1+tuxcare"}]}],"versions":["2.9.1"],"database_specific":{"tuxcare":{"fixed_version":"2.9.1.post1+tuxcare","base_version":"2.9.1"},"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/pypi/CLSA-2026-1774830249.json"}}],"schema_version":"1.9.0"}