autogluon (0.0.5), bliz (>=0.1.0, <=0.1.3) +25 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.2)

scikit-learn PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - autogluon 0.0.5 - bliz =0.1.0, =0.0.70, =0.1.18, =1.0.0, =0.8.0, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.3, =0.0.14 and mo...

autogluon (0.0.5), bliz (>=0.1.0, <=0.1.3) +25 more potentially affected by CVE-2024-5206 via scikit-learn (0.21.2)

scikit-learn PYPI version 0.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on scikit-learn and may be impacted: - autogluon 0.0.5 - bliz =0.1.0, =0.0.70, =0.1.18, =1.0.0, =0.8.0, =0.2.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.3, =0.0.14 and mo...