diff --git a/advisories/github-reviewed/2026/10/GHSA-j7qq-vr8c-xvw3/GHSA-j7qq-vr8c-xvw3.json b/advisories/github-reviewed/2026/10/GHSA-j7qq-vr8c-xvw3/GHSA-j7qq-vr8c-xvw3.json index 6cbf5a90d8f2..a0f0989fcc92 100644 --- a/advisories/github-reviewed/2026/10/GHSA-j7qq-vr8c-xvw3/GHSA-j7qq-vr8c-xvw3.json +++ b/advisories/github-reviewed/2026/10/GHSA-j7qq-vr8c-xvw3/GHSA-j7qq-vr8c-xvw3.json @@ -33,6 +33,44 @@ ] } ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "mlflow-skinny" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "2.19.0" + }, + { + "fixed": "3.17.0" + } + ] + } + ] + }, + { + "package": { + "ecosystem": "PyPI", + "name": "mlflow-tracing" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "3.17.0" + } + ] + } + ] } ], "references": [ @@ -55,6 +93,22 @@ { "type": "WEB", "url": "https://github.com/mlflow/mlflow/releases/tag/v3.17.0" + }, + { + "type": "WEB", + "url": "https://pypi.org/project/mlflow-skinny/2.19.0/" + }, + { + "type": "WEB", + "url": "https://pypi.org/project/mlflow-skinny/3.17.0/" + }, + { + "type": "WEB", + "url": "https://pypi.org/project/mlflow-tracing/3.0.0.0rc1/" + }, + { + "type": "WEB", + "url": "https://pypi.org/project/mlflow-tracing/3.17.0/" } ], "database_specific": {