ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-4035 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

mlflow-cratedb (2.22.4) potentially affected by CVE-2026-4035 via mlflow (2.22.4)

mlflow PYPI version 2.22.4 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-cratedb 2.22.4 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

api-python-bet-project (>=0.1.9, <=0.1.22), bir-mlflow-export-import (1.2.0) +10 more potentially affected by CVE-2026-4035 via mlflow (2.19.0)

mlflow PYPI version 2.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - api-python-bet-project =0.1.9, =1.1.5, =0.14.0, =0.14.0, =0.14.0, =1.4.4, =1.0.0, =0.1.0a0, =0.3.5, =0.3.9 Source cves: CVE-2026-4035 Source...

auf (>=1.0.0, <=2.0.1), auto-mlflow (1.0.0) +8 more potentially affected by CVE-2026-4035 via mlflow (2.9.2)

mlflow PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auf =1.0.0, =0.0.40.post1, =0.1.1, =0.1.0, =1.8.2, =1.0.12, =0.1.2, =0.1.3 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

azureml-evaluate-mlflow (>=0.0.57, <=0.0.58), eensight (>=1.0.0, <=1.0.2) +6 more potentially affected by CVE-2026-4035 via mlflow (2.12.2)

mlflow PYPI version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.57, =1.0.0, =0.8.0, =0.0.6, =0.6.0.dev0, =0.10.0, =0.10.2 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2...

iqradre (>=0.1.5, <=0.2.1) potentially affected by CVE-2026-4035 via mlflow (1.20.0)

mlflow PYPI version 1.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - iqradre =0.1.5, =0.2.1 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

flown (>=0.0.1, <=0.1.0) potentially affected by CVE-2026-4035 via mlflow (1.17.0)

mlflow PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flown =0.0.1, =0.1.0 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

api-python-bet-project (>=0.1.23, <=0.1.28), llm-foundry (>=0.19.0, <=0.21.0) +8 more potentially affected by CVE-2026-4035 via mlflow (2.21.3)

mlflow PYPI version 2.21.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - api-python-bet-project =0.1.23, =0.19.0, =2.1.2, =0.1.11, =0.1.51.5, =1.0.4 - terratorch 1.0.1 - wedata-pre-code 2.0.1 Source cves: CVE-2026-4035...

azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-4035 via mlflow (2.10.2)

mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

octopi (>=1.0.0, <=1.1.0) potentially affected by CVE-2026-4035 via mlflow (2.17.0)

mlflow PYPI version 2.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - octopi =1.0.0, =1.1.0 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

azureml-contrib-run (>=1.0.23, <=1.0.30.1) potentially affected by CVE-2026-4035 via mlflow (0.9.0)

mlflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.23, =1.0.30.1 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2026-4035 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

dagster-mlflow (>=0.14.18rc5, <=0.17.21), sparkpipelineframework (1.0.18) potentially affected by CVE-2026-4035 via mlflow (1.26.0)

mlflow PYPI version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.14.18rc5, =0.17.21 - sparkpipelineframework 1.0.18 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

cnext (>=0.3.5, <=0.3.8), code-first-pipelines (>=0.8.0, <=1.0.0) +51 more potentially affected by CVE-2026-4035 via mlflow (1.30.1)

mlflow PYPI version 1.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - cnext =0.3.5, =0.8.0, =0.6.1rc1, =0.2.4, =0.24.24, =0.0.1a0, =1.0.1, =0.1.1, =0.3.0, =0.8.3, =0.48.0, =0.2.0, =0.2.0, =0.3.0 and more Source cves:...

ai-24sea (>=0.1.0, <=1.0.0), cogflow (>=1.12.0, <=3.0.0b14) +4 more potentially affected by CVE-2026-4035 via mlflow (2.22.0)

mlflow PYPI version 2.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ai-24sea =0.1.0, =1.12.0, =1.4.5, =0.1.6, =1.0.2, =1.1.0rc4 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

mantik (>=0.2.0, <=0.4.2), mlflow-hf-transformers (0.4.0) +2 more potentially affected by CVE-2026-4035 via mlflow (2.2.2)

mlflow PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mantik =0.2.0, =0.4.2 - mlflow-hf-transformers 0.4.0 - pyrovelocity 0.1.2 - tradex 0.0.3 Source cves: CVE-2026-4035 Source advisory:...

abnativ (>=1.1.0, <=1.2.9), ai-helpers-pytorch-utils (0.1.0a1) +114 more potentially affected by CVE-2026-4035 via mlflow (2.22.5)

mlflow PYPI version 2.22.5 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - abnativ =1.1.0, =0.1.0, =1.7.0.dev1715243074, =1.7.0.dev1715246371, =1.8.0rc6, =1.7.0.dev1715246329, =1.7.0.dev1715246310, =0.1.29, =0.1.0, =0.1.2,...

deepsleep (1.0.3) potentially affected by CVE-2026-4035 via mlflow (1.5.0)

mlflow PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - deepsleep 1.0.3 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

layer-client (0.3.5), sapsan (>=0.1.1, <=0.2.7) potentially affected by CVE-2026-4035 via mlflow (1.11.0)

mlflow PYPI version 1.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - layer-client 0.3.5 - sapsan =0.1.1, =0.2.7 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-4035 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...