argos-trains (0.1.0), fastmri (>=0.1.0.post210716, <=0.1.1) +5 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.0.8)

pytorch-lightning PYPI version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - argos-trains 0.1.0 - fastmri =0.1.0.post210716, =0.5.1, =0.5.3 - quickvision 0.1.1rc1 - raylab 0.14.12 Source cves:...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2026-2614 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2026-2614 Source advisory: OSV:GHSA-42H5-H8QH-VV9V...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2026-2393 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2026-2393 Source advisory: OSV:GHSA-65H7-C7C4-MGHX...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2026-2393 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2026-2393 Source advisory: OSV:PYSEC-2026-2219...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2026-41486 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2026-41486 Source advisory: OSV:PYSEC-2026-2...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-15036 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-15036 Source advisory: OSV:GHSA-VHCX-3PQ2-4FV...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-15381 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-15381 Source advisory: OSV:GHSA-G6PG-52VF-843...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-15031 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-15031 Source advisory: OSV:GHSA-FHFF-QMM8-H2F...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2026-32981 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2026-32981 Source advisory:...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2026-32981 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2026-32981 Source advisory: OSV:PYSEC-2026-1...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2026-27482 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2026-27482 Source advisory: OSV:PYSEC-2026-2...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2026-2033 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2026-2033 Source advisory: OSV:GHSA-Q2R8-VMQ7-FPX2...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2026-27482 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2026-27482 Source advisory:...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-10279 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXX...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-14279 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-14279 Source advisory: OSV:GHSA-PGQP-8H46-6X4...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2025-34351 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2025-34351 Source advisory:...

argos-trains (0.1.0), beta-rec (>=0.2.3, <=0.3.2) +3 more potentially affected by CVE-2025-62593 via ray (1.0.1)

ray PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on ray and may be impacted: - argos-trains 0.1.0 - beta-rec =0.2.3, =0.1.1, =0.2.1 - raylab 0.14.9 - tamu-axolotl 2021.4.8 Source cves: CVE-2025-62593 Source advisory:...

Malicious code in argos-findability-url-builder (npm)

The package argos-findability-url-builder was found to contain malicious code...

MAL-2025-14821 Malicious code in argos-findability-url-builder (npm)

The package argos-findability-url-builder was found to contain malicious code...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2025-52967 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2025-52967 Source advisory: OSV:PYSEC-2025-52...