mlflow-asus-aimaker (>=0.0.6, <=1.0.2), newsmodel (0.1.0) +3 more potentially affected by CVE-2023-3765 via mlflow (1.24.0)

mlflow PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-asus-aimaker =0.0.6, =1.3.0, =3.1.1, =3.1.4, =3.1.6 Source cves: CVE-2023-3765 Source advisory: OSV:PYSEC-2023-308...

mlflow-asus-aimaker (>=0.0.6, <=1.0.2), newsmodel (0.1.0) +3 more potentially affected by CVE-2023-1176 via mlflow (1.24.0)

mlflow PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-asus-aimaker =0.0.6, =1.3.0, =3.1.1, =3.1.4, =3.1.6 Source cves: CVE-2023-1176 Source advisory: OSV:GHSA-WP72-7HJ9-5265...