From 96b371e78bf13b5ac67c5486e15785b78e5196c8 Mon Sep 17 00:00:00 2001 From: Gabriel <166170970+Fanxy13@users.noreply.github.com> Date: Sun, 20 Sep 2026 22:16:01 +0200 Subject: [PATCH] GHSA-gqch-g4w5-7qcw: correct affected ecosystem to PyPI This advisory describes a flaw in the MLflow Python tracking server, not in the unrelated npm package of the same name. Co-Authored-By: Claude Opus 5 --- .../2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/advisories/github-reviewed/2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json b/advisories/github-reviewed/2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json index b4b893d7c25b..e857d49a209f 100644 --- a/advisories/github-reviewed/2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json +++ b/advisories/github-reviewed/2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json @@ -17,7 +17,7 @@ "affected": [ { "package": { - "ecosystem": "npm", + "ecosystem": "PyPI", "name": "mlflow" }, "ranges": [