agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2734 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-4137 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2614 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-15381 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-15031 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-14287 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-14287 Source advisory: OSV:PYSEC-2026-2661...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2033 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2033 Source advisory: OSV:PYSEC-2026-2658...

Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wjp-v33h-5cvq. This link is maintained to preserve external references. Original Description PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key...

GHSA-G3PQ-3VVX-36W6 Duplicate Advisory: PraisonAI: AgentOS defaults to network-exposed no-auth mode, allowing unauthenticated agent invocation and instruction disclosure

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-6wjp-v33h-5cvq. This link is maintained to preserve external references. Original Description PraisonAI before 1.7.3 contains an insecure default configuration that binds to all interfaces with no API key...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-10279 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-14279 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-11200 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-11200 Source advisory: OSV:PYSEC-2026-1642...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-11201 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-11201 Source advisory: OSV:PYSEC-2026-1640...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-0453 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-8859 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-8859 Source advisory: OSV:PYSEC-2026-1638...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-6838 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-6838 Source advisory: OSV:PYSEC-2026-1658...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-3099 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-3099 Source advisory: OSV:PYSEC-2026-1645...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-1560 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-1560 Source advisory: OSV:PYSEC-2026-1641...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-1593 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-1593 Source advisory: OSV:PYSEC-2026-1649...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-1558 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-1558 Source advisory: OSV:PYSEC-2026-1653...