csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2025-14287 via mlflow (2.10.0)

mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2025-14287 Source advisory: OSV:PYSEC-2026-2661...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2026-2033 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2026-2033 Source advisory:...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2026-2033 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2026-2033 Source advisory: OSV:PYSEC-2026-2658...

csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2025-10279 via mlflow (2.10.0)

mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2025-10279 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...

csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2025-14279 via mlflow (2.10.0)

mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2025-14279 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2025-14279 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2025-14279 Source advisory:...

elemeno-ai-sdk (>=0.0.5, <=0.6.11), elemeno-mlops-cli (>=0.0.1, <=0.0.4) +22 more potentially affected by CVE-2025-11157 via feast (>=0.9.3, <=0.49.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.3.0, =0.1.0rc3, =0.0.2, =1.0.0, =0.1.0, =0.1.33.dev3, =0.1.0, =0.6.19 and more Source cves: CVE-2025-11157 Source advisory: OSV:PYSEC-2026-1366...

biome-text (3.3.0), elemeno-ai-sdk (>=0.0.8, <=0.2.4) +5 more potentially affected by CVE-2025-11200 via mlflow (1.20.2)

mlflow PYPI version 1.20.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - biome-text 3.3.0 - elemeno-ai-sdk =0.0.8, =0.0.1, =0.2.1.2, =0.1.5, =2.5.1a1, =0.0.1, =0.0.48 Source cves: CVE-2025-11200 Source advisory:...

elemeno-ai-sdk (>=0.0.5, <=0.6.11), elemeno-mlops-cli (>=0.0.1, <=0.0.4) +12 more potentially affected by CVE-2024-11602 via feast (>=0.9.3, <=0.39.1)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.3.0, =0.1.0rc3, =0.0.2, =1.0.0, =0.1.0, =0.0.1, =0.0.23 Source cves: CVE-2024-11602 Source advisory: OSV:PYSEC-2026-1367...

ansible-gen (0.5.2), auto-white-reimu (0.1.4) +9 more potentially affected by CVE-2024-56326 via jinja2 (2.11.0)

jinja2 PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - ansible-gen 0.5.2 - auto-white-reimu 0.1.4 - cookiecutter 1.7.1 - mlops-generator =0.1.1, =0.1.0, =0.1.3, =0.0.0.1, =0.0.1 Source cves:...

elemeno-mlops-client (>=0.0.7, <=0.0.20) potentially affected by CVE-2024-38526 via pdoc (11.0.0)

pdoc PYPI version 11.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pdoc and may be impacted: - elemeno-mlops-client =0.0.7, =0.0.20 Source cves: CVE-2024-38526 Source advisory: OSV:PYSEC-2026-1764...

ansible-gen (0.5.2), auto-white-reimu (0.1.4) +9 more potentially affected by CVE-2024-34064 via jinja2 (2.11.0)

jinja2 PYPI version 2.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - ansible-gen 0.5.2 - auto-white-reimu 0.1.4 - cookiecutter 1.7.1 - mlops-generator =0.1.1, =0.1.0, =0.1.3, =0.0.0.1, =0.0.1 Source cves:...

elemeno-ai-sdk (>=0.0.5, <=0.6.11), elemeno-mlops-cli (>=0.0.1, <=0.0.4) +22 more potentially affected by CVE-2026-23537 via feast (>=0.9.3, <=0.49.0)

feast PYPI version =0.9.3, =0.0.5, =0.0.1, =0.1.0, =0.3.0, =0.1.0rc3, =0.0.2, =1.0.0, =0.1.0, =0.1.33.dev3, =0.1.0, =0.6.19 and more Source cves: CVE-2026-23537 Source advisory: MEND:CVE-2026-23537...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2026-2635 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2026-2635 Source advisory: OSV:PYSEC-2026-421...

csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2026-2635 via mlflow (2.10.0)

mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2026-2635 Source advisory: OSV:PYSEC-2026-421...

csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2026-0545 via mlflow (2.10.0)

mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2026-0545 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2026-0545 Source advisory: OSV:PYSEC-2026-419...

csc-mlops (>=0.8.0, <=0.9.18), email-cleaning-service (>=0.0.1, <=1.0.0) +1 more potentially affected by CVE-2025-15036 via mlflow (2.0.1)

mlflow PYPI version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.8.0, =0.0.1, =1.6.1, =1.6.2 Source cves: CVE-2025-15036 Source advisory: OSV:PYSEC-2026-425...