Address CVEs for MLFlow Server Image from Twistlock Reports

[axsaucedo]

Actionable Vulnerabilities: Implies there is a fixed version available for vulnerable package.

Severity   CVSS       Type       CVE ID               Package                                       Version                                  status                                   Twistlock Severity   Link                                                                                                

P3         6.5        python     CVE-2020-26137       urllib3                                       1.24.2                                   fixed in 1.25.9                          medium               https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-26137                                     
P3         6.1        python     CVE-2019-11236       urllib3                                       1.24.2                                   fixed in 1.24.3                          medium               https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2019-11236                                     
P3         5.9        python     CVE-2020-1971        cryptography                                  2.7                                      fixed in 3.3, 1.8                        medium               https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2020-1971                                      
P3         0          python     PRISMA-2021-0020     click                                         7.1.2                                    fixed in 8.0.0                           medium                                                                                                                   

Summary

P1         P2         P3         P4        
0          0          4          0 

[axsaucedo]

Confirmed CVEs resolved