Merge pull request #223828 from dotlambda/mlflow-insecure

2023-03-30 22:41:35 +02:00 · 2023-03-30 22:41:35 +02:00 · 05a166109f
commit 05a166109f
parent 003c2e3957 744c81ef1c
1 changed files with 4 additions and 0 deletions
--- a/pkgs/development/python-modules/mlflow/default.nix
+++ b/pkgs/development/python-modules/mlflow/default.nix
@ -84,5 +84,9 @@ buildPythonPackage rec {
    changelog = "https://github.com/mlflow/mlflow/blob/v${version}/CHANGELOG.md";
    license = licenses.asl20;
    maintainers = with maintainers; [ tbenst ];
+    knownVulnerabilities = [
+      "CVE-2023-1176"
+      "CVE-2023-1177"
+    ];
  };
 }