PYSEC-2026-1664 Exposure of Sensitive Information in mltable

Azure Machine Learning Compute Instance for SDK Users Information Disclosure Vulnerability...

Information Disclosure

mltable is vulnerable to Information Disclosure. An attacker could exploit this vulnerability to disclose training data...

azureml-featurestore (>=0.1.0b1 <=0.1.0b3) potentially affected by CVE-2023-35625 via mltable (=1.1.0)

mltable PYPI version =1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mltable and may be impacted: - azureml-featurestore =0.1.0b1, =0.1.0b3 Source cves: CVE-2023-35625 Source advisory: OSV:GHSA-M5PC-86X8-WCXG...