azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-33865 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XVHR...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2026-33865 +1 more via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2026-33865, CVE-2026-33866 Source advisory: OSV:PYSEC-2026-94...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2026-33865 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2026-33865 Source advisory: OSV:PYSEC-2026-93...

azureml-evaluate-mlflow (>=0.0.26, <=0.0.34), graphmb (0.2.6) +5 more potentially affected by CVE-2026-33865 via mlflow (2.6.0)

mlflow PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.26, =0.0.1.post1, =1.0.1, =1.0.2 Source cves: CVE-2026-33865 Source advisory: OSV:PYSEC-2026-93...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-33865 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-33865 Source advisory: OSV:PYSEC-2026-93...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-0545 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-0545 Source advisory: OSV:GHSA-7QHF-V65M-G5F3...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2026-0545 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2026-0545 Source advisory: OSV:GHSA-7QHF-V65M-G5F3...

azureml-evaluate-mlflow (>=0.0.26, <=0.0.34), graphmb (0.2.6) +5 more potentially affected by CVE-2026-0545 via mlflow (2.6.0)

mlflow PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.26, =0.0.1.post1, =1.0.1, =1.0.2 Source cves: CVE-2026-0545 Source advisory: OSV:GHSA-7QHF-V65M-G5F3...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2026-0596 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2026-0596 Source advisory: OSV:GHSA-RVHJ-8CHJ-8V3C...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2026-0596 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2026-0596 Source advisory: OSV:GHSA-RVHJ-8CHJ-8V3C...

azureml-evaluate-mlflow (>=0.0.26, <=0.0.34), graphmb (0.2.6) +5 more potentially affected by CVE-2026-0596 via mlflow (2.6.0)

mlflow PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.26, =0.0.1.post1, =1.0.1, =1.0.2 Source cves: CVE-2026-0596 Source advisory: OSV:GHSA-RVHJ-8CHJ-8V3C...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2025-15379 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2025-15379 Source advisory: OSV:GHSA-R23Q-823P-VMF7...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2025-15379 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2025-15379 Source advisory: OSV:GHSA-R23Q-823P-VMF7...

azureml-evaluate-mlflow (>=0.0.26, <=0.0.34), graphmb (0.2.6) +5 more potentially affected by CVE-2025-15379 via mlflow (2.6.0)

mlflow PYPI version 2.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.26, =0.0.1.post1, =1.0.1, =1.0.2 Source cves: CVE-2025-15379 Source advisory: OSV:GHSA-R23Q-823P-VMF7...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2025-15036 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2025-15036 Source advisory: OSV:GHSA-VHCX-3PQ2-4FVC...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2025-15036 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2025-15036 Source advisory: OSV:GHSA-VHCX-3PQ2-4FVC...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2025-15381 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2025-15381 Source advisory: OSV:GHSA-G6PG-52VF-843H...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2025-15381 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2025-15381 Source advisory: OSV:GHSA-G6PG-52VF-843H...

azureml-evaluate-mlflow (>=0.0.14, <=0.0.25), graphmb (0.2.5) +1 more potentially affected by CVE-2025-15031 via mlflow (2.3.1)

mlflow PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.14, =1.0.3, =1.2.5 Source cves: CVE-2025-15031 Source advisory: OSV:GHSA-FHFF-QMM8-H2FP...

graphmb (>=0.2.0rc0, <=0.2.3), openstef (>=3.2.43, <=3.2.60) +1 more potentially affected by CVE-2025-15031 via mlflow (2.1.1)

mlflow PYPI version 2.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - graphmb =0.2.0rc0, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2025-15031 Source advisory: OSV:GHSA-FHFF-QMM8-H2FP...