emb-model (>=0.1.0, <=0.2.9), mlflow-cratedb (2.11.3) +2 more potentially affected by CVE-2026-4137 via mlflow (2.11.3)

mlflow PYPI version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - emb-model =0.1.0, =0.0.3.dev0, =0.0.15 - smartdeploymiguel 0.1.1 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...