llm-foundry (0.11.0), modeva (>=1.0.14, <=2.1.0) potentially affected by CVE-2026-0596 via mlflow (2.15.1)

mlflow PYPI version 2.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - llm-foundry 0.11.0 - modeva =1.0.14, =2.1.0 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

dagster-mlflow (>=0.19.11, <=0.21.4), databricks-session (0.1.9) +14 more potentially affected by CVE-2026-0596 via mlflow (1.27.0)

mlflow PYPI version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.19.11, =0.3.0, =0.0.4.dev3, =3.0.1, =4.0.2, =0.1.0, =3.2.18, =0.1.0, =0.0.1.dev202206240024, =0.1.0, =0.1.5 and more Source cves:...

ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2026-0596 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2026-0596 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2026-0596 Source advisory:...

backwardcompatibilityml (>=1.4.0, <=1.4.2), layer-client (>=0.3.7b1, <=0.3.9) potentially affected by CVE-2026-0596 via mlflow (1.12.1)

mlflow PYPI version 1.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - backwardcompatibilityml =1.4.0, =0.3.7b1, =0.3.9 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

biome-text (>=3.0.0, <=3.2.1), farm (>=0.6.2, <=0.8.0) +5 more potentially affected by CVE-2026-0596 via mlflow (1.13.1)

mlflow PYPI version 1.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text =3.0.0, =0.6.2, =0.7.0, =0.0.1, =1.1.0, =1.0.0, =0.4.5.dev2, =0.6.5 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2026-0596 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

autozeekwatch (>=0.1.0, <=0.1.3), azureml-evaluate-mlflow (>=0.0.4, <=0.0.12) +4 more potentially affected by CVE-2026-0596 via mlflow (2.2.1)

mlflow PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autozeekwatch =0.1.0, =0.0.4, =0.1.0, =0.1.0, =0.1.7 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

cnext (>=0.3.5, <=0.3.8), code-first-pipelines (>=0.8.0, <=1.0.0) +51 more potentially affected by CVE-2026-0596 via mlflow (1.30.1)

mlflow PYPI version 1.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - cnext =0.3.5, =0.8.0, =0.6.1rc1, =0.2.4, =0.24.24, =0.0.1a0, =1.0.1, =0.1.1, =0.3.0, =0.8.3, =0.48.0, =0.2.0, =0.2.0, =0.3.0 and more Source cves:...

triggerflow (0.3.3) potentially affected by CVE-2026-0596 via mlflow (2.21.0)

mlflow PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - triggerflow 0.3.3 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

aiops-ml (>=1.0.0, <=1.0.1), architxt (>=0.3.1, <=0.5.2) +49 more potentially affected by CVE-2026-0596 via mlflow (>=3.0.0rc2, <=3.8.1)

mlflow PYPI version =3.0.0rc2, =1.0.0, =0.3.1, =1.1.0b1, =0.0.1, =1.0.17.1, =1.23.0, =0.1.0, =0.1.0, =0.0.1rc1, =2.5.0, =0.2.1, =0.0.1, =0.0.1, =0.8.0, =0.8.1 and more Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-0596 via mlflow (2.10.1)

mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

flown (>=0.0.1, <=0.1.0) potentially affected by CVE-2026-0596 via mlflow (1.17.0)

mlflow PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flown =0.0.1, =0.1.0 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-0596 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

auf (>=1.0.0, <=2.0.1), auto-mlflow (1.0.0) +8 more potentially affected by CVE-2026-0596 via mlflow (2.9.2)

mlflow PYPI version 2.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auf =1.0.0, =0.0.40.post1, =0.1.1, =0.1.0, =1.8.2, =1.0.12, =0.1.2, =0.1.3 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

openstef (>=3.2.0a0, <=3.2.6) potentially affected by CVE-2026-0596 via mlflow (1.25.1)

mlflow PYPI version 1.25.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - openstef =3.2.0a0, =3.2.6 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

hf-ehr (>=0.1.2, <=0.1.4), mllibprodest (>=1.8.4, <=1.8.5) +2 more potentially affected by CVE-2026-0596 via mlflow (2.11.1)

mlflow PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hf-ehr =0.1.2, =1.8.4, =1.8.5 - pms-encoder 1.1.0 - pollychem 0.1.0 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

argosml (>=0.0.1, <=0.1.3), bbj-argos (0.0.1) +6 more potentially affected by CVE-2026-0596 via mlflow (2.17.2)

mlflow PYPI version 2.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - argosml =0.0.1, =2.1.3, =0.1.50.4, =0.1.6, =0.1.9.post2 - wedata-pre-code 2.0.2 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

mlflow-cratedb (2.14.0) potentially affected by CVE-2026-0596 via mlflow (2.14.0)

mlflow PYPI version 2.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-cratedb 2.14.0 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...

mlflow-dl (>=0.2.0, <=0.2.2), mlsriracha (0.0.2) +1 more potentially affected by CVE-2026-0596 via mlflow (1.19.0)

mlflow PYPI version 1.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-dl =0.2.0, =0.1.0, =2.0.8 Source cves: CVE-2026-0596 Source advisory: OSV:PYSEC-2026-424...