fastrepl (>=0.0.21, <=0.0.25), funcflow (0.0.3) +2 more potentially affected by CVE-2026-47102 via litellm (0.8.6)

litellm PYPI version 0.8.6 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - fastrepl =0.0.21, =0.0.5, =0.0.9 Source cves: CVE-2026-47102 Source advisory: OSV:PYSEC-2026-2600...

autogpt-forge (>=0.1.0, <=0.1.3), cosmoai (>=0.6.0, <=0.6.6) +12 more potentially affected by CVE-2026-47102 via litellm (0.1.7713)

litellm PYPI version 0.1.7713 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - autogpt-forge =0.1.0, =0.6.0, =0.2.4, =0.1.11, =0.0.1, =0.1.7, =0.1.0, =0.1.2, =0.0.2, =0.0.3 - yival 0.1.0a4 Source cves: CVE-2026-47102 Sourc...

open-interpreter (>=0.1.12, <=0.1.17), promptmodel (>=0.0.25, <=0.0.31) potentially affected by CVE-2026-47102 via litellm (0.13.2)

litellm PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - open-interpreter =0.1.12, =0.0.25, =0.0.31 Source cves: CVE-2026-47102 Source advisory: OSV:PYSEC-2026-2600...

soam (>=0.3.5, <=0.10.1) potentially affected by CVE-2026-3515 via prefect (0.14.17)

prefect PYPI version 0.14.17 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - soam =0.3.5, =0.10.1 Source cves: CVE-2026-3515 Source advisory: OSV:PYSEC-2026-2957...

cupyopt (0.14.11.1), fantasy-analysis (>=0.0.0, <=0.0.3) potentially affected by CVE-2026-3515 via prefect (0.14.11)

prefect PYPI version 0.14.11 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cupyopt 0.14.11.1 - fantasy-analysis =0.0.0, =0.0.3 Source cves: CVE-2026-3515 Source advisory: OSV:PYSEC-2026-2957...

rosys (>=0.3.3, <=0.4.5) potentially affected by CVE-2026-45554 via nicegui (0.6.5)

nicegui PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.3.3, =0.4.5 Source cves: CVE-2026-45554 Source advisory: OSV:PYSEC-2026-2680...

rosys (>=0.4.13, <=0.5.0) potentially affected by CVE-2026-45554 via nicegui (0.6.12)

nicegui PYPI version 0.6.12 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.13, =0.5.0 Source cves: CVE-2026-45554 Source advisory: OSV:PYSEC-2026-2680...

dagster-mlflow (>=0.18.0, <=0.18.3), dbx (0.5.0) +13 more potentially affected by CVE-2026-2734 via mlflow (1.26.1)

mlflow PYPI version 1.26.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.18.0, =0.2.5, =0.0.1, =0.3.3, =0.2.0.dev3, =0.2.0.dev2, =0.40.2.dev25, =0.40.2.dev18, =0.39.1rc2, =3.2.7, =0.0.1, =0.1.2, =0.2.1...

mlfields (0.0.0), poms (0.0.0) potentially affected by CVE-2026-4137 via mlflow (1.20.1)

mlflow PYPI version 1.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlfields 0.0.0 - poms 0.0.0 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

apache-liminal (>=0.0.4rc1, <=0.0.5), apache-liminal-zion (>=0.0.0, <=2.0.0) +1 more potentially affected by CVE-2026-27173 via apache-airflow-providers-cncf-kubernetes (1.0.2)

apache-airflow-providers-cncf-kubernetes PYPI version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-cncf-kubernetes and may be impacted: - apache-liminal =0.0.4rc1, =0.0.0, =2.0.0 - example-pkg-naturalett 14.7.0 Source...

rosys (>=0.4.10, <=0.4.12) potentially affected by CVE-2026-45554 via nicegui (0.6.10)

nicegui PYPI version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - rosys =0.4.10, =0.4.12 Source cves: CVE-2026-45554 Source advisory: OSV:PYSEC-2026-2680...

autopilotml (>=1.0.1, <=1.0.14), mlflow-cratedb (2.8.0) +3 more potentially affected by CVE-2026-2734 via mlflow (2.8.0)

mlflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autopilotml =1.0.1, =0.4.9rc2, =0.1.0, =0.1.5 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

sapsan (>=0.6.1, <=0.6.2) potentially affected by CVE-2026-2734 via mlflow (1.25.0)

mlflow PYPI version 1.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sapsan =0.6.1, =0.6.2 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

azureml-evaluate-mlflow (>=0.0.57, <=0.0.58), eensight (>=1.0.0, <=1.0.2) +6 more potentially affected by CVE-2026-2734 via mlflow (2.12.2)

mlflow PYPI version 2.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-evaluate-mlflow =0.0.57, =1.0.0, =0.8.0, =0.0.6, =0.6.0.dev0, =0.10.0, =0.10.2 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2026-2734 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

triggerflow (0.3.3) potentially affected by CVE-2026-2734 via mlflow (2.21.0)

mlflow PYPI version 2.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - triggerflow 0.3.3 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

csc-mlops (>=0.9.21, <=0.10.0), mlflow-cratedb (2.10.0) +1 more potentially affected by CVE-2026-4137 via mlflow (2.10.0)

mlflow PYPI version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - csc-mlops =0.9.21, =0.10.0 - mlflow-cratedb 2.10.0 - refract-mlflow-plugin 1.0.3 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2026-4137 via mlflow (1.4.0)

mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

birm-nm-foo (1.5.0), hip-data-ml-utils (1.2.6) +6 more potentially affected by CVE-2026-4137 via mlflow (2.5.0)

mlflow PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - birm-nm-foo 1.5.0 - hip-data-ml-utils 1.2.6 - hive-ml =1.0.0a0.post2, =0.2.0, =1.6.0, =1.4.1, =1.5.5 - t2r2 0.0.1 Source cves: CVE-2026-4137 Source...

dagster-mlflow (>=0.19.11, <=0.21.4), databricks-session (0.1.9) +14 more potentially affected by CVE-2026-4137 via mlflow (1.27.0)

mlflow PYPI version 1.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.19.11, =0.3.0, =0.0.4.dev3, =3.0.1, =4.0.2, =0.1.0, =3.2.18, =0.1.0, =0.0.1.dev202206240024, =0.1.0, =0.1.5 and more Source cves:...