ansible-gen (0.5.2), auto-white-reimu (0.1.4) +9 more potentially affected by CVE-2024-22195 via jinja2 (2.11.0)

jinja2 PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - ansible-gen 0.5.2 - auto-white-reimu 0.1.4 - cookiecutter 1.7.1 - mlops-generator =0.1.1, =0.1.0, =0.1.3, =0.0.0.1, =0.0.1 Source cves:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-6909 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-6909 Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-6976 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-6976 Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-6709 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-6709 Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-6014 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-6014 Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-6015 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-6015 Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-2780 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-2780 Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-2780 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-2780 Source advisory:...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2022-33891 +1 more via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2022-33891, CVE-2023-32007 Source advisory: OSV:PYSEC-2023-72...

autozeekwatch (>=0.1.0, <=0.1.3), azureml-evaluate-mlflow (>=0.0.4, <=0.0.12) +17 more potentially affected by unknown CVE via mlflow (>=2.0.0rc0, <=2.3.0)

mlflow PYPI version =2.0.0rc0, =0.1.0, =0.0.4, =0.8.0, =0.0.1, =1.10.2, =0.2.0rc0, =1.6.1, =0.2.0, =0.1.0, =1.0.0rc5, =0.1.0, =0.1.7 and more Source cves: unknown CVE Source advisory: OSV:GHSA-83FM-W79M-64R5...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by unknown CVE via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: unknown CVE Source advisory:...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2023-2356 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2023-2356 Source advisory:...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2023-22946 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2023-22946 Source advisory: OSV:GHSA-329J-JFVR-RHR6...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2023-22946 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +7 more potentially affected by CVE-2023-1176 via mlflow (>=2.0.0rc0, <=2.1.1)

mlflow PYPI version =2.0.0rc0, =0.8.0, =0.0.1, =1.10.2, =0.2.0rc0, =1.6.1, =1.0.0rc5, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2023-1176 Source advisory: GHSA-WP72-7HJ9-5265...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +7 more potentially affected by CVE-2023-1177 via mlflow (>=2.0.0rc0, <=2.1.1)

mlflow PYPI version =2.0.0rc0, =0.8.0, =0.0.1, =1.10.2, =0.2.0rc0, =1.6.1, =1.0.0rc5, =3.2.43, =0.0.1, =0.2.9 Source cves: CVE-2023-1177 Source advisory: GHSA-XG73-94FP-G449...

MLOps Security Best practices

MLOps provides a systematic approach to evaluating and monitoring ML models. Discover the various security concerns associated with MLOps and learn the best practices for using it securely...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2022-31777 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2022-31777 Source advisory: OSV:GHSA-43XG-8WMJ-CW8H...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2022-33891 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2021-38296 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2021-38296 Source advisory: OSV:GHSA-9RR6-JPG7-9JG6...