auto-ml (>=2.9.0, <=2.9.10), automl (>=2.9.0, <=2.9.9) +3 more potentially affected by CVE-2024-43598 via lightgbm (2.0.12)

lightgbm PYPI version 2.0.12 is affected by a known vulnerability. The following packages have a transitive dependency on lightgbm and may be impacted: - auto-ml =2.9.0, =2.9.0, =0.0.1, =0.1.0, =1.0.1 Source cves: CVE-2024-43598 Source advisory: OSV:PYSEC-2024-231...