EUVD-2023-2110

Malicious code in bioql PyPI...

ai.h2o:h2o-admissibleml (>=3.34.0.1 <=3.42.0.2), ai.h2o:h2o-algos (>=3.10.5.1 <=3.42.0.2) +51 more potentially affected by CVE-2023-39013 via no.priv.garshol.duke:duke (=1.2)

no.priv.garshol.duke:duke MAVEN version =1.2 is affected by a known vulnerability. The following packages have a transitive dependency on no.priv.garshol.duke:duke and may be impacted: - ai.h2o:h2o-admissibleml =3.34.0.1, =3.10.5.1, =3.10.5.1, =3.12.0.1, =3.10.5.1, =3.10.5.1, =3.14.0.7, =3.16.0.1...