MLflow contains a server-side request forgery vulnerability that can allow attackers to reach internal or cloud metadata services and receive response_status and response_body.
Source: NVD ↗ · CISA KEV Catalog ↗