14 matches found
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-64849 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
dimensigon (>=0.3.4, <=0.3.5), hybrid-rsa-aes (0.2.7) +2 more potentially affected by CVE-2026-69249 via cryptography (3.4.5)
cryptography PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dimensigon =0.3.4, =1.9.0, =0.1.0, =0.1.20 Source cves: CVE-2026-69249 Source advisory: OSV:PYSEC-2026-3553...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-2614 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-0545 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-2614 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-2614 Source advisory: OSV:GHSA-42H5-H8QH-VV9...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-2393 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-2393 Source advisory: OSV:PYSEC-2026-2219...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-33865 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-33865 Source advisory: OSV:GHSA-FH64-R2VC-XV...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-33866 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-33866 Source advisory: OSV:GHSA-46R5-X6JQ-V8...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2026-33865 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2026-33865 Source advisory: OSV:PYSEC-2026-93...
dimensigon (>=0.3.4, <=0.3.5), hybrid-rsa-aes (0.2.7) +2 more potentially affected by CVE-2026-34073 via cryptography (3.4.5)
cryptography PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dimensigon =0.3.4, =1.9.0, =0.1.0, =0.1.20 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...
flasksimpleauth (3.1.1), kordesii (2.4.0) +2 more potentially affected by CVE-2026-27205 via flask (2.0.0rc2)
flask PYPI version 2.0.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on flask and may be impacted: - flasksimpleauth 3.1.1 - kordesii 2.4.0 - mlf-core =1.0.0, =1.11.2 - mwcp 3.4.0 Source cves: CVE-2026-27205 Source advisory: OSV:PYSEC-2026-2151...
dimensigon (>=0.3.4, <=0.3.5), hybrid-rsa-aes (0.2.7) +2 more potentially affected by CVE-2026-26007 via cryptography (3.4.5)
cryptography PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dimensigon =0.3.4, =1.9.0, =0.1.0, =0.1.20 Source cves: CVE-2026-26007 Source advisory: OSV:PYSEC-2026-2141...
azureml-evaluate-mlflow (>=0.0.46, <=47.0.0), cogflow (>=1.2.0, <=1.2.13) +5 more potentially affected by CVE-2025-52967 via mlflow (2.10.2)
mlflow PYPI version 2.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.46, =1.2.0, =0.0.10, =1.2.7, =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2025-52967 Source advisory: OSV:PYSEC-2025-52...
dimensigon (>=0.3.4, <=0.3.5), hybrid-rsa-aes (0.2.7) +2 more potentially affected by CVE-2024-0727 via cryptography (3.4.5)
cryptography PYPI version 3.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - dimensigon =0.3.4, =1.9.0, =0.1.0, =0.1.20 Source cves: CVE-2024-0727 Source advisory: OSV:GHSA-9V9H-CGJ8-H64P...