mlflow vulnerabilities (npm)

2 vulnerabilities.

• mlflow npm MLflow: LogInputs endpoint bypasses per-run UPDATE authorization in basic-auth CVE-2026-69146 Fix available 6.5 MediumAugust 17, 2026
• mlflow npm MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id CVE-2026-69148 Fix available 7.1 HighAugust 17, 2026