ml-deploy (2.0.0), waveletai (>=0.2.5, <=0.2.11) potentially affected by CVE-2024-1483 via mlflow (1.18.0)

mlflow PYPI version 1.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ml-deploy 2.0.0 - waveletai =0.2.5, =0.2.11 Source cves: CVE-2024-1483 Source advisory: OSV:PYSEC-2026-1650...

azureml-contrib-run (>=1.0.72, <=1.0.74), azureml-mlflow (>=1.0.72.1, <=1.0.74) potentially affected by CVE-2024-1483 via mlflow (1.3.0)

mlflow PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.72, =1.0.72.1, =1.0.74 Source cves: CVE-2024-1483 Source advisory: OSV:PYSEC-2026-1650...

flown (>=0.0.1, <=0.1.0) potentially affected by CVE-2024-1594 via mlflow (1.17.0)

mlflow PYPI version 1.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flown =0.0.1, =0.1.0 Source cves: CVE-2024-1594 Source advisory: OSV:PYSEC-2026-1655...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-1483 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-1483 Source advisory: OSV:PYSEC-2026-1650...

memegen-desktop (>=0.0.1, <=0.1.1), moca (0.3.3) +1 more potentially affected by CVE-2024-28219 via pillow (3.3.1)

pillow PYPI version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - memegen-desktop =0.0.1, =0.0.4.dev68, =0.0.5.dev3 Source cves: CVE-2024-28219 Source advisory: OSV:PYSEC-2026-1793...

acapy-patched-old (0.5.6), agl-predict-endo-frame (0.1.1) +271 more potentially affected by CVE-2024-28219 via pillow (7.2.0)

pillow PYPI version 7.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - acapy-patched-old 0.5.6 - agl-predict-endo-frame 0.1.1 - ailab-lite =0.1.1, =0.0.2, =0.3.10, =0.1.0, =2020.1.0, =0.9.0, =0.9.0, =0.8.1, =0.8.1,...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2024-3568 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2024-3568 Source advisory: OSV:PYSEC-2026-1978...

asiva (>=1.0.1, <=1.3.1), loci-st (0.1.0) +9 more potentially affected by CVE-2024-30265 via voila (>=0.1.24, <=0.2.10)

voila PYPI version =0.1.24, =1.0.1, =0.2.1, =0.0.1, =0.0.6, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.0a4 - voila-sourcemaps 0.2.4 Source cves: CVE-2024-30265 Source advisory: OSV:PYSEC-2026-2027...

aeroscope (>=0.1.0b0, <=0.2.5b0), nemoview (>=0.1.0, <=0.2.2) +9 more potentially affected by CVE-2024-30265 via voila (0.4.0)

voila PYPI version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on voila and may be impacted: - aeroscope =0.1.0b0, =0.1.0, =2.2.6, =2.3.0, =1.0.0, =1.0.0, =1.8.2, =1.0.0, =1.0.0, =1.0.0, =1.5.2, =1.6.3 Source cves: CVE-2024-30265 Source advisory...

africanwhisper (>=0.2.8, <=0.9.0), aishell (>=2023.3.3, <=2023.4.11) +81 more potentially affected by CVE-2024-22423 via yt-dlp (>=2021.9.2, <=2024.3.10)

yt-dlp PYPI version =2021.9.2, =0.2.8, =2023.3.3, =0.1.0, =0.3.0, =0.0.4, =0.9.0, =1.4.0, =1.1.1, =0.1.0, =1.0.2, =1.0.1.1, =2.0.0a1, =0.1.3, =0.1.9 and more Source cves: CVE-2024-22423 Source advisory: OSV:PYSEC-2026-2066...

adversarial-robustness-toolbox (1.2.0), aristote-malo (1.9.5) +79 more potentially affected by CVE-2024-28219 via pillow (7.0.0)

pillow PYPI version 7.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adversarial-robustness-toolbox 1.2.0 - aristote-malo 1.9.5 - auto-annotate =1.0.0, =1.0.2, =0.1.0.dev31, =1.0.1, =0.2.3, =0.0.1.25, =0.2.1, =0.0.2,...

academic-chatgpt (>=0.3.0, <=0.4.1), agentverse (>=0.1.5, <=0.1.8) +46 more potentially affected by CVE-2024-2206 via gradio (3.50.2)

gradio PYPI version 3.50.2 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - academic-chatgpt =0.3.0, =0.1.5, =0.0.4, =0.8.11, =0.1.0, =0.1.3, =1.1.0, =1.2.1 and more Source cves: CVE-2024-2206 Source advisory:...

jhub-shibboleth-auth (1.5.0), jupyterhub-ltiauthenticator (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2024-28233 via jupyterhub (0.9.6)

jupyterhub PYPI version 0.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jhub-shibboleth-auth 1.5.0 - jupyterhub-ltiauthenticator =0.1.0, =0.0.2, =0.0.9 Source cves: CVE-2024-28233 Source advisory:...

dearwatson (>=0.1.2, <=0.1.15), lcbuilder (>=0.4.6, <=0.7.20) +4 more potentially affected by CVE-2023-41334 via astropy (4.3.0.post1)

astropy PYPI version 4.3.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - dearwatson =0.1.2, =0.4.6, =0.0.1, =0.24.1rc11, =0.2.8, =0.3.13 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

vantage6-node (3.3.5), vantage6-server (3.3.5) potentially affected by CVE-2024-24770 via vantage6 (3.3.5)

vantage6 PYPI version 3.3.5 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.5 - vantage6-server 3.3.5 Source cves: CVE-2024-24770 Source advisory: OSV:PYSEC-2026-2005...

ligo-skymap (0.5.1), simmer (>=0.3.10, <=0.4.4) potentially affected by CVE-2023-41334 via astropy (4.0.6)

astropy PYPI version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on astropy and may be impacted: - ligo-skymap 0.5.1 - simmer =0.3.10, =0.4.4 Source cves: CVE-2023-41334 Source advisory: OSV:PYSEC-2026-1199...

ai-agents (>=0.0.2, <=0.0.3), autotrain-advanced (>=0.6.15, <=0.6.31) potentially affected by CVE-2024-1729 via gradio (3.39.0)

gradio PYPI version 3.39.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - ai-agents =0.0.2, =0.6.15, =0.6.31 Source cves: CVE-2024-1729 Source advisory: OSV:PYSEC-2026-1416...

aepp-sdk (>=0.18.0.3, <=0.18.0.4), atlassian-jwt-auth (>=3.3.1, <=4.0.1) +19 more potentially affected by CVE-2023-50782 via cryptography (2.2.2)

cryptography PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aepp-sdk =0.18.0.3, =3.3.1, =0.2.2, =0.1.1, =0.16.8, =0.10.4, =1.6.517, =3.0.4, =0.6.7, =0.3.7, =1.4.5, =2.0.1 and more Source cves:...

acmebot (>=2.8.1, <=2.13.1), aiovotifier (>=1.0.0, <=1.0.6) +104 more potentially affected by CVE-2023-50782 via cryptography (35.0.0)

cryptography PYPI version 35.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - acmebot =2.8.1, =1.0.0, =0.1.0, =1.25.2, =0.9.7, =0.1.2, =0.11.0, =12.0.1, =0.0.6, =4.0.1, =0.0.7, =0.14.0, =0.7.12, =0.8.2 and more...

travis-encrypt (>=0.0.1, <=0.3.2) potentially affected by CVE-2023-50782 via cryptography (1.5.0)

cryptography PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - travis-encrypt =0.0.1, =0.3.2 Source cves: CVE-2023-50782 Source advisory: OSV:PYSEC-2026-1283...