flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2025-10279 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2025-10279 Source advisory: OSV:GHSA-4X5P-F36R-MXXR...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2025-14279 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2025-14279 Source advisory: OSV:GHSA-PGQP-8H46-6X4J...

databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-11201 via mlflow (>=3.0.0rc2, <=3.0.0rc3)

mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-11201 Source advisory: GHSA-5CVJ-7RG6-JGGJ...

databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-11201 via mlflow (>=3.0.0rc2, <=3.0.0rc3)

mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-11201 Source advisory: OSV:GHSA-5CVJ-7RG6-JGGJ...

databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-11201 via mlflow (>=3.0.0rc2, <=3.0.0rc3)

mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-11201 Source advisory: SNYK:PYTHON-MLFLOW-13774699...

databricks-agents (>=1.0.0rc0, <=1.0.0rc1), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-52967 via mlflow (>=3.0.0rc2, <=3.0.0rc3)

mlflow PYPI version =3.0.0rc2, =1.0.0rc0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-52967 Source advisory: SNYK:PYTHON-MLFLOW-10494137...

databricks-agents (>=0.1.0, <=1.0.0rc3), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-52967 via mlflow (>=3.0.0rc2, <=3.1.0rc0)

mlflow PYPI version =3.0.0rc2, =0.1.0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-52967 Source advisory: OSV:GHSA-WXJ7-3FX5-PP9M...

databricks-agents (>=0.1.0, <=1.0.0rc3), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-52967 via mlflow (>=3.0.0rc2, <=3.1.0rc0)

mlflow PYPI version =3.0.0rc2, =0.1.0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-52967 Source advisory: GHSA-WXJ7-3FX5-PP9M...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2025-52967 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2025-52967 Source advisory: OSV:PYSEC-2025-52...

databricks-agents (>=0.1.0, <=1.0.0rc3), datamint (>=2.5.0, <=2.5.2) +2 more potentially affected by CVE-2025-52967 via mlflow (>=3.0.0rc2, <=3.1.0rc0)

mlflow PYPI version =3.0.0rc2, =0.1.0, =2.5.0, =0.6.7, =0.8.1 Source cves: CVE-2025-52967 Source advisory: OSV:PYSEC-2025-52...

autonomize-ml-observability (>=1.1.0b1, <=1.2.7), autonomize-observer (>=0.0.1, <=0.0.5) +5 more potentially affected by CVE-2025-0453 via mlflow (>=3.0.0rc2, <=3.1.0)

mlflow PYPI version =3.0.0rc2, =1.1.0b1, =0.0.1, =0.1.0, =2.5.0, =0.6.7, =0.0.4, =0.0.9b0 Source cves: CVE-2025-0453 Source advisory: SNYK:PYTHON-MLFLOW-9510841...

flytekitplugins-mlflow (>=1.10.2, <=1.12.0b4), justmltools (3.9.3) +1 more potentially affected by CVE-2023-30172 via mlflow (2.0.0rc0)

mlflow PYPI version 2.0.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - flytekitplugins-mlflow =1.10.2, =1.0.0rc5, =1.0.0rc8 Source cves: CVE-2023-30172 Source advisory: OSV:PYSEC-2023-70...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +7 more potentially affected by CVE-2023-1176 via mlflow (>=2.0.0rc0, <=2.1.1)

mlflow PYPI version =2.0.0rc0, =0.8.0, =0.0.1, =1.10.2, =0.2.0rc0, =1.6.1, =1.0.0rc5, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2023-1176 Source advisory: GHSA-WP72-7HJ9-5265...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +7 more potentially affected by CVE-2023-1177 via mlflow (>=2.0.0rc0, <=2.1.1)

mlflow PYPI version =2.0.0rc0, =0.8.0, =0.0.1, =1.10.2, =0.2.0rc0, =1.6.1, =1.0.0rc5, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2023-1177 Source advisory: GHSA-XG73-94FP-G449...