insurautoml (>=0.2.2.10, <=0.2.3), ntcore (>=0.0.1, <=0.0.3) +2 more potentially affected by CVE-2023-3765 via mlflow (1.21.0)

mlflow PYPI version 1.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - insurautoml =0.2.2.10, =0.0.1, =3.0.0, =2.6.3, =2.6.4 Source cves: CVE-2023-3765 Source advisory: OSV:GHSA-FMXJ-6H9G-6VW3...

mlflow-asus-aimaker (>=0.0.6, <=1.0.2), newsmodel (0.1.0) +3 more potentially affected by CVE-2023-3765 via mlflow (1.24.0)

mlflow PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-asus-aimaker =0.0.6, =1.3.0, =3.1.1, =3.1.4, =3.1.6 Source cves: CVE-2023-3765 Source advisory: OSV:PYSEC-2023-308...

mlflow-asus-aimaker (>=0.0.6, <=1.0.2), newsmodel (0.1.0) +3 more potentially affected by CVE-2023-1176 via mlflow (1.24.0)

mlflow PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlflow-asus-aimaker =0.0.6, =1.3.0, =3.1.1, =3.1.4, =3.1.6 Source cves: CVE-2023-1176 Source advisory: OSV:GHSA-WP72-7HJ9-5265...

openstef (>=3.0.5a5, <=3.1.0), scania-truck-air-presure-fault-detector (0.1.0) +2 more potentially affected by CVE-2023-1176 via mlflow (1.22.0)

mlflow PYPI version 1.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - openstef =3.0.5a5, =0.4.0, =0.2.19, =0.2.29 Source cves: CVE-2023-1176 Source advisory: OSV:PYSEC-2023-28...