132 matches found
GHSA-3HJ7-6VMJ-H8V4 pacioli: A submit consent marker licensed cancellation of caller-named pre-existing documents
Impact pacioli-guard's document-layer consent gate requires a human-minted, single-use, document-bound and act-bound marker before a credential carrying API Key Scope.requireconsent may submit or cancel a document. Because ERPNext performs further document writes as a consequence of a governed ac...
pylaia (>=1.1.0, <=1.1.1rc1), pyrovelocity (0.1.1) +2 more potentially affected by CVE-2024-5452 via pytorch-lightning (1.3.0)
pytorch-lightning PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pylaia =1.1.0, =1.1.1rc1 - pyrovelocity 0.1.1 - ratsnlp 0.0.9984 - ride 0.4.4 Source cves: CVE-2024-5452 Source advisory:...
pylaia (>=1.1.0, <=1.1.1rc1), pyrovelocity (0.1.1) +2 more potentially affected by CVE-2024-5980 via pytorch-lightning (1.3.0)
pytorch-lightning PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pylaia =1.1.0, =1.1.1rc1 - pyrovelocity 0.1.1 - ratsnlp 0.0.9984 - ride 0.4.4 Source cves: CVE-2024-5980 Source advisory:...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2026-64849 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2026-64849 Source advisory: OSV:PYSEC-2026-3687...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2026-3198 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2026-3198 Source advisory: OSV:PYSEC-2026-2659...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2026-2734 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2026-4137 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2026-2614 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...
pylaia (>=1.1.0, <=1.1.1rc1), pyrovelocity (0.1.1) +2 more potentially affected by CVE-2026-31221 via pytorch-lightning (1.3.0)
pytorch-lightning PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pylaia =1.1.0, =1.1.1rc1 - pyrovelocity 0.1.1 - ratsnlp 0.0.9984 - ride 0.4.4 Source cves: CVE-2026-31221 Source advisory:...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-15381 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-15031 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-14287 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-14287 Source advisory: OSV:PYSEC-2026-2661...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-10279 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-14279 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-11201 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-11201 Source advisory: OSV:PYSEC-2026-1640...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-11200 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-11200 Source advisory: OSV:PYSEC-2026-1642...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2025-0453 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2025-0453 Source advisory: OSV:PYSEC-2026-1637...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2024-8859 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2024-8859 Source advisory: OSV:PYSEC-2026-1638...
pylaia (>=1.1.0, <=1.1.1rc1), pyrovelocity (0.1.1) +2 more potentially affected by CVE-2024-8020 via pytorch-lightning (1.3.0)
pytorch-lightning PYPI version 1.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - pylaia =1.1.0, =1.1.1rc1 - pyrovelocity 0.1.1 - ratsnlp 0.0.9984 - ride 0.4.4 Source cves: CVE-2024-8020 Source advisory:...
azureml-evaluate-mlflow (>=0.0.1, <=0.0.2), ride-duration-prediction-sunxi1010 (0.3.0) +1 more potentially affected by CVE-2024-6838 via mlflow (1.28.0)
mlflow PYPI version 1.28.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.1, =0.0.1, =0.3.4 Source cves: CVE-2024-6838 Source advisory: OSV:PYSEC-2026-1658...