azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-64849 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-64849 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...

b2aiprep (>=2.4.0, <=2.7.0), chatlas-embed (>=0.1.1, <=0.1.18) +4 more potentially affected by CVE-2026-66007 via datasets (3.0.2)

datasets PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - b2aiprep =2.4.0, =0.1.1, =0.0.75, =0.1.3, =0.31.0, =0.38.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-3198 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-3198 Source advisory: OSV:PYSEC-2026-2659...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-0545 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-0545 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-4035 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-4035 Source advisory: OSV:GHSA-G35P-PX32-WHV6...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-4035 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-4035 Source advisory: OSV:GHSA-G35P-PX32-WHV6...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-4035 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-4035 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-4035 Source advisory: OSV:PYSEC-2026-2222...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-3198 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-3198 Source advisory: OSV:GHSA-R5M9-WM49-959F...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-2651 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-2651 Source advisory: OSV:GHSA-8C7Q-86FQ-VVMH...

banglanlptoolkit (>=1.1.7.dev4, <=1.1.8), contextqa (>=2.0.0, <=2.0.5) +27 more potentially affected by CVE-2026-4372 via transformers (4.42.4)

transformers PYPI version 4.42.4 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - banglanlptoolkit =1.1.7.dev4, =2.0.0, =0.0.71, =0.0.1b2, =0.5.0rc0, =0.2.0, =1.0.0, =0.9.3, =0.1.0, =1.0.0, =0.1.0, =0.1.1 and more...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-2651 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-2651 Source advisory: OSV:PYSEC-2026-2220...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-2652 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-2652 Source advisory: OSV:GHSA-75CM-X2W3-8MGF...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-2652 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-2652 Source advisory: OSV:GHSA-75CM-X2W3-8MGF...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-2614 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-2614 Source advisory: OSV:GHSA-42H5-H8QH-VV9V...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-2393 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-2393 Source advisory: OSV:GHSA-65H7-C7C4-MGHX...

ddi-fw (>=0.0.41, <=0.0.97) potentially affected by CVE-2026-2393 via mlflow (2.16.1)

mlflow PYPI version 2.16.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - ddi-fw =0.0.41, =0.0.97 Source cves: CVE-2026-2393 Source advisory: OSV:PYSEC-2026-2219...

azureml-evaluate-mlflow (>=0.0.35, <=0.0.36), ddi-fw (>=0.0.9, <=0.0.40) +3 more potentially affected by CVE-2026-33865 via mlflow (2.7.1)

mlflow PYPI version 2.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.35, =0.0.9, =0.2.0, =1.7.0, =0.4.5, =0.4.9rc1 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XVHR...