mlfields (0.0.0), poms (0.0.0) potentially affected by CVE-2026-4137 via mlflow (1.20.1)

mlflow PYPI version 1.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - mlfields 0.0.0 - poms 0.0.0 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...

hip-data-ml-utils (>=0.3.7, <=1.0.0), mllibprodest (>=1.5.0, <=1.5.1) +1 more potentially affected by CVE-2026-2734 via mlflow (1.29.0)

mlflow PYPI version 1.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - hip-data-ml-utils =0.3.7, =1.5.0, =0.2.33, =0.2.39 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

azureml-contrib-run (>=1.0.23, <=1.0.30.1) potentially affected by CVE-2026-2734 via mlflow (0.9.0)

mlflow PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - azureml-contrib-run =1.0.23, =1.0.30.1 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...

aignostics (>=0.2.200, <=0.2.226), auth-web-kit (>=0.1.0, <=1.2.1) +13 more potentially affected by CVE-2026-45553 via nicegui (>=3.0.0rc1, <=3.10.0)

nicegui PYPI version =3.0.0rc1, =0.2.200, =0.1.0, =0.1.3, =0.9.0, =0.12.0, =1.0.126, =0.1.10.31, =0.3.1, =0.4.24, =1.0.0, =1.5.20, =12.22.3, =12.22.5 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

otanalytics (>=0.6.15, <=0.7.5), synth-mapping-helper (1.5.19) potentially affected by CVE-2026-45553 via nicegui (2.24.1)

nicegui PYPI version 2.24.1 is affected by a known vulnerability. The following packages have a transitive dependency on nicegui and may be impacted: - otanalytics =0.6.15, =0.7.5 - synth-mapping-helper 1.5.19 Source cves: CVE-2026-45553 Source advisory: OSV:PYSEC-2026-2679...

embedchain (>=0.1.117, <=0.1.118) potentially affected by CVE-2026-31245 via mem0ai (0.0.5)

mem0ai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain =0.1.117, =0.1.118 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-2633...

embedchain (>=0.1.117, <=0.1.118) potentially affected by CVE-2026-31241 via mem0ai (0.0.5)

mem0ai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain =0.1.117, =0.1.118 Source cves: CVE-2026-31241 Source advisory: OSV:PYSEC-2026-2634...

embedchain (>=0.1.117, <=0.1.118) potentially affected by CVE-2026-31240 via mem0ai (0.0.5)

mem0ai PYPI version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain =0.1.117, =0.1.118 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

embedchain (0.1.121) potentially affected by CVE-2026-31240 via mem0ai (0.0.20)

mem0ai PYPI version 0.0.20 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - embedchain 0.1.121 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

chatformers (>=1.0.4, <=1.0.8) potentially affected by CVE-2026-31240 via mem0ai (0.1.19)

mem0ai PYPI version 0.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - chatformers =1.0.4, =1.0.8 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

testchimp-local (>=0.0.1, <=0.0.9) potentially affected by CVE-2026-31240 via mem0ai (0.1.111)

mem0ai PYPI version 0.1.111 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - testchimp-local =0.0.1, =0.0.9 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

mcp-validator (0.1.1) potentially affected by CVE-2026-31245 via mem0ai (0.1.113)

mem0ai PYPI version 0.1.113 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - mcp-validator 0.1.1 Source cves: CVE-2026-31245 Source advisory: OSV:PYSEC-2026-2633...

agentiq-mem0ai (>=1.1.0a20250502, <=1.1.0a20250505), aip-agents-binary (>=0.0.0b3, <=0.4.8) +19 more potentially affected by CVE-2026-31245 via mem0ai (0.1.118)

mem0ai PYPI version 0.1.118 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - agentiq-mem0ai =1.1.0a20250502, =0.0.0b3, =1.1.0a20250429, =0.13.0, =0.1.122, =0.0.2, =0.1.0.dev7, =0.1.0, =0.0.19, =1.0.0a1, =1.1.0a20251020,...

mcp-validator (0.1.1) potentially affected by CVE-2026-31241 via mem0ai (0.1.113)

mem0ai PYPI version 0.1.113 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - mcp-validator 0.1.1 Source cves: CVE-2026-31241 Source advisory: OSV:PYSEC-2026-2634...

mcp-validator (0.1.1) potentially affected by CVE-2026-31240 via mem0ai (0.1.113)

mem0ai PYPI version 0.1.113 is affected by a known vulnerability. The following packages have a transitive dependency on mem0ai and may be impacted: - mcp-validator 0.1.1 Source cves: CVE-2026-31240 Source advisory: OSV:PYSEC-2026-2635...

airoboros (>=2.1.6, <=2.2.1), bhasa (>=0.1.0, <=0.1.1) +19 more potentially affected by CVE-2026-31253 via flash-attn (>=2.0.8, <=2.8.3)

flash-attn PYPI version =2.0.8, =2.1.6, =0.1.0, =0.1.0, =0.0.5, =0.1.0, =0.2.0rc2, =0.0.1, =0.3.6.post1, =0.1.8, =0.0.1.post1, =0.0.2 and more Source cves: CVE-2026-31253 Source advisory: OSV:PYSEC-2026-2477...

agentfoundry (1.2.9.1), instructlab-sdg (>=0.6.2, <=0.7.2) +14 more potentially affected by CVE-2026-31248 via docling (>=2.8.1, <=2.55.0)

docling PYPI version =2.8.1, =0.6.2, =2.0.0, =0.1.0, =0.2.1, =0.6.1, =1.0.1, =0.3.0, =0.3.1, =0.10.0, =0.2.1, =0.1.0, =1.3.41 - rakam-systems 0.2.4 and more Source cves: CVE-2026-31248 Source advisory: OSV:PYSEC-2026-2454...

auto-mlflow (1.5.0), databricks-genai (>=1.2.0a23, <=1.2.0a24) +2 more potentially affected by CVE-2026-2614 via mlflow (2.20.3)

mlflow PYPI version 2.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - auto-mlflow 1.5.0 - databricks-genai =1.2.0a23, =0.1.0, =0.99.9, =0.99.9.post1 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

autopilotml (>=1.0.1, <=1.0.14), mlflow-cratedb (2.8.0) +3 more potentially affected by CVE-2026-2614 via mlflow (2.8.0)

mlflow PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - autopilotml =1.0.1, =0.4.9rc2, =0.1.0, =0.1.5 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...

dagster-mlflow (>=0.14.18rc5, <=0.17.21), sparkpipelineframework (1.0.18) potentially affected by CVE-2026-2614 via mlflow (1.26.0)

mlflow PYPI version 1.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - dagster-mlflow =0.14.18rc5, =0.17.21 - sparkpipelineframework 1.0.18 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...