From 5cdd0976a1f3cb7d5093218027fec814a2176e88 Mon Sep 17 00:00:00 2001 From: suryadev99 <81183603+suryadev99@users.noreply.github.com> Date: Thu, 28 Sep 2023 22:24:07 +0530 Subject: [PATCH] Update requirements.txt To fix vulnerabilities in the mlflow package Relative Path Traversal mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Relative Path Traversal due to allowing the ability to provide relative paths in registered model sources. --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 8b0f5360..4a0e2c75 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,7 +2,7 @@ hyperopt==0.2.7 ipywidgets>=8 matplotlib==3.7.1 -mlflow==2.3.1 +mlflow==2.6.0 nltk==3.8.1 numpy==1.24.3 numpyencoder==0.3.0