auto-ml (>=2.9.0, <=2.9.10), automl (>=2.9.0, <=2.9.9) +3 more potentially affected by CVE-2024-43598 via lightgbm (2.0.12)

lightgbm PYPI version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - auto-ml =2.9.0, =2.9.0, =0.0.1, =0.1.0, =1.0.1 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...

auto-dl (0.1.1), auto-ml (>=2.8.0, <=2.8.1) +42 more potentially affected by CVE-2024-5206 via scikit-learn (0.19.1)

scikit-learn PYPI version 0.19.1 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - auto-dl 0.1.1 - auto-ml =2.8.0, =1.0.72, =0.1.57, =0.1.19008.12a1, =0.2.0, =0.10.0, =1.1.5, =0.0.12, =0.0.6b0, =0.0.5, =0.2.0, =0.4.0 -...