agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-1483 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-1483 Source advisory: OSV:PYSEC-2026-1650...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2024-1594 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2024-1594 Source advisory: OSV:PYSEC-2026-1655...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6977 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6977 Source advisory: OSV:PYSEC-2026-1659...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6976 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6976 Source advisory: OSV:PYSEC-2026-1662...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6940 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6940 Source advisory: OSV:PYSEC-2026-1652...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-43472 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-43472 Source advisory: OSV:PYSEC-2026-1661...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-2635 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-2635 Source advisory: OSV:PYSEC-2026-421...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-0545 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2026-0596 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-15036 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-15036 Source advisory: OSV:PYSEC-2026-425...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2025-15379 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2025-15379 Source advisory: OSV:PYSEC-2026-423...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6975 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6975 Source advisory: OSV:PYSEC-2026-422...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6974 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6974 Source advisory: OSV:PYSEC-2026-416...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6014 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6014 Source advisory: OSV:PYSEC-2026-415...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6018 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6018 Source advisory: OSV:PYSEC-2026-417...

agentos (>=0.0.5, <=0.0.7) potentially affected by CVE-2023-6015 via mlflow (1.9.1)

mlflow PYPI version 1.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - agentos =0.0.5, =0.0.7 Source cves: CVE-2023-6015 Source advisory: OSV:PYSEC-2026-420...

GHSA-9752-MHQH-H34F npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

Summary The published npm package praisonai ships a TypeScript AgentOS HTTP server that defaults to host: "0.0.0.0" and registers sensitive agent routes without any authentication or authorization middleware. When a developer starts AgentOS, a network attacker who can reach the service can: - rea...

NPM: npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation

NPM: npm PraisonAI AgentOS exposes unauthenticated agent listing and invocation vulnerability discovered by ? in WordPress Npm praisonai versions = 1.6.0, = 1.7.1...

GHSA-892R-P3JQ-JP24 PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation Summary PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The publi...

PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocation Summary PraisonAI's AgentOS FastAPI deployment surface remains unauthenticated in current main and in releases after the published patched version for GHSA-pm96-6xpr-978x / CVE-2026-40151. The publi...