Daily Neural Digest
Back to AI Stack Advisories
stack advisoriesstack-advisoriessecuritysupply-chain

AI stack advisories — vulnerabilities OSV published for the packages you run

Every security advisory OSV published in the last 60 days for 25 packages used in AI stacks (torch, transformers, vLLM, langchain, gradio, aiohttp and more): identifiers, affected and fixed versions, read from the API and not written by a model.

FTL LabOctober 9, 202627 min read5 312 words

What this page is

Once a day we ask the OSV database — the vulnerability database maintained by Google, which aggregates GitHub Security Advisories, PyPA advisories, the NVD and others — what it has published in the last 60 days for 25 packages that show up in AI stacks. This page is the answer, unedited: identifiers, summaries, affected version ranges and fixed versions exactly as the API returns them. No language model writes anything here, and no human reviews it before publication.

Two things this page deliberately does not do. It does not rate anything: when OSV carries no severity field for an entry — which happens often, the PYSEC records in particular — the line below says so instead of guessing. And it does not tell you whether a flaw is exploitable in your deployment: that depends on how you call the library, and nobody but you can answer it.

The most recent advisory in this batch was published on 2026-10-06. GHSA-935w-9g4m-p28p is the newest entry; the full list follows.

Advisories published in the last 60 days

Published Package Identifier Affected versions Fixed in Link
2026-10-06 vllm (PyPI) GHSA-935w-9g4m-p28p — CVE-2026-105752 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-935w-9g4m-p28p
2026-10-05 vllm (PyPI) GHSA-x6mc-67gf-chw4 — CVE-2026-105758 >= 0.24.0 < 0.30.0 ; enumerated versions: 0.24.0, 0.25.0, 0.25.1, … (+5 more listed by the source) 0.30.0 GHSA-x6mc-67gf-chw4
2026-10-05 vllm (PyPI) GHSA-ph72-cqr5-qpp7 — CVE-2026-105754 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-ph72-cqr5-qpp7
2026-10-05 vllm (PyPI) GHSA-ph3r-5jfg-f84f — CVE-2026-105753 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 GHSA-ph3r-5jfg-f84f
2026-10-05 vllm (PyPI) GHSA-85xf-c7hm-whqw — CVE-2026-105757 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-85xf-c7hm-whqw
2026-10-05 vllm (PyPI) GHSA-58v5-2m8f-94pr — CVE-2026-105760 >= 0.23.0rc2 < 0.30.0 ; enumerated versions: 0.23.0, 0.24.0, 0.25.0, … (+6 more listed by the source) 0.30.0 GHSA-58v5-2m8f-94pr
2026-10-05 vllm (PyPI) GHSA-2phq-3phc-84px — CVE-2026-105755 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-2phq-3phc-84px
2026-10-05 vllm (PyPI) GHSA-2823-qmq8-rwvj — CVE-2026-105756 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 GHSA-2823-qmq8-rwvj
2026-10-01 sentence-transformers (PyPI) PYSEC-2026-4164 — CVE-2026-68770 all versions < 5.6.0 ; enumerated versions: 0.1.0, 0.2.0, 0.2.1, … (+75 more listed by the source) 5.6.0 PYSEC-2026-4164
2026-09-30 vllm (PyPI) PYSEC-2026-4186 — CVE-2026-103241 all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source) 0.27.0 PYSEC-2026-4186
2026-09-26 vllm (PyPI) PYSEC-2026-4185 — CVE-2026-100652 >= 0.22.0 < 0.24.0 ; enumerated versions: 0.22.0, 0.22.1, 0.23.0 0.24.0 PYSEC-2026-4185
2026-09-26 vllm (PyPI) PYSEC-2026-4184 — CVE-2026-100650 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4184
2026-09-21 vllm (PyPI) PYSEC-2026-4008 — CVE-2026-94626 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4008
2026-09-21 vllm (PyPI) PYSEC-2026-4007 — CVE-2026-94625 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4007
2026-09-21 vllm (PyPI) PYSEC-2026-4006 — CVE-2026-94624 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4006
2026-09-21 vllm (PyPI) PYSEC-2026-4005 — CVE-2026-94623 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4005
2026-09-21 vllm (PyPI) PYSEC-2026-4004 — CVE-2026-94622 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4004
2026-09-19 vllm (PyPI) PYSEC-2026-4000 — CVE-2026-93989 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-4000
2026-09-18 vllm (PyPI) PYSEC-2026-3999 — CVE-2026-93841 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-3999
2026-09-18 vllm (PyPI) PYSEC-2026-3998 — CVE-2026-93840 all versions < 0.29.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+93 more listed by the source) 0.29.0 PYSEC-2026-3998
2026-09-18 vllm (PyPI) PYSEC-2026-3997 — CVE-2026-93592 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 PYSEC-2026-3997
2026-09-17 vllm (PyPI) PYSEC-2026-3996 — CVE-2026-93436 all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source) 0.30.0 PYSEC-2026-3996
2026-09-17 vllm (PyPI) GHSA-8pw2-6jv3-mj5j — CVE-2026-69147 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 GHSA-8pw2-6jv3-mj5j
2026-09-16 vllm (PyPI) GHSA-hcwq-8wjf-3gcr — CVE-2026-57173 all versions < 0.24.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+86 more listed by the source) 0.24.0 GHSA-hcwq-8wjf-3gcr
2026-09-12 vllm (PyPI) PYSEC-2026-3985 — CVE-2026-90553 all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source) 0.28.0 PYSEC-2026-3985
2026-09-10 transformers (PyPI) PYSEC-2026-3929 — CVE-2026-9856 all versions < 5.10.0 ; enumerated versions: 0.1, 2.0.0, 2.1.0, … (+223 more listed by the source) 5.10.0 PYSEC-2026-3929
2026-09-08 vllm (PyPI) GHSA-7m6h-x95x-82q5 — CVE-2026-73558 all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source) 0.27.0 GHSA-7m6h-x95x-82q5
2026-09-08 vllm (PyPI) GHSA-4hhp-h66f-j5j7 — CVE-2026-73560 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 GHSA-4hhp-h66f-j5j7
2026-09-04 vllm (PyPI) GHSA-pr7f-p5mw-fc87 — CVE-2026-73557 >= 0.21.0 < 0.26.0 ; enumerated versions: 0.21.0, 0.22.0, 0.22.1, … (+4 more listed by the source) 0.26.0 GHSA-pr7f-p5mw-fc87
2026-09-04 vllm (PyPI) GHSA-hwrm-c4cx-rf4j — CVE-2026-73555 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 GHSA-hwrm-c4cx-rf4j
2026-09-04 vllm (PyPI) GHSA-8737-qx52-hjff — CVE-2026-71486 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 GHSA-8737-qx52-hjff
2026-09-04 vllm (PyPI) GHSA-48jh-3gj7-fg8v — CVE-2026-73556 all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source) 0.26.0 GHSA-48jh-3gj7-fg8v
2026-09-01 transformers (PyPI) GHSA-x9r9-c232-4q39 — CVE-2026-80047 >= 4.49.0 <= 5.8.1 ; enumerated versions: 4.49.0, 4.50.0, 4.50.1, … (+52 more listed by the source) not provided by the source GHSA-x9r9-c232-4q39
2026-08-25 vllm (PyPI) PYSEC-2026-4003 — CVE-2026-78684 all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source) 0.27.0 PYSEC-2026-4003
2026-08-13 vllm (PyPI) GHSA-87x5-vmc3-756j — CVE-2026-73559 >= 0.19.0 < 0.26.0 ; enumerated versions: 0.19.0, 0.19.1, 0.20.0, … (+9 more listed by the source) 0.26.0 GHSA-87x5-vmc3-756j
2026-08-10 accelerate (PyPI) GHSA-4j2p-28q2-5m79 — CVE-2026-69112 all versions <= 1.14.0 ; enumerated versions: 0.0.1, 0.1.0, 0.10.0, … (+79 more listed by the source) not provided by the source GHSA-4j2p-28q2-5m79

One line per advisory, with the source summary

  • vllm (PyPI), published 2026-10-06 — GHSA-935w-9g4m-p28p — severity: LOW (database_specific.severity of OSV entry GHSA-935w-9g4m-p28p)
    • Summary, quoted from the source: “vLLM: Harmony tool continuations drop cache_salt — restoring a cross-tenant prefix-cache membership oracle”
    • Aliases listed by OSV: CVE-2026-105752
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-935w-9g4m-p28p
  • vllm (PyPI), published 2026-10-05 — GHSA-x6mc-67gf-chw4 — severity: MODERATE (database_specific.severity of OSV entry GHSA-x6mc-67gf-chw4)
    • Summary, quoted from the source: “vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach”
    • Aliases listed by OSV: CVE-2026-105758
    • Affected versions: >= 0.24.0 < 0.30.0 ; enumerated versions: 0.24.0, 0.25.0, 0.25.1, … (+5 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-x6mc-67gf-chw4
  • vllm (PyPI), published 2026-10-05 — GHSA-ph72-cqr5-qpp7 — severity: MODERATE (database_specific.severity of OSV entry GHSA-ph72-cqr5-qpp7)
    • Summary, quoted from the source: “vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features”
    • Aliases listed by OSV: CVE-2026-105754
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-ph72-cqr5-qpp7
  • vllm (PyPI), published 2026-10-05 — GHSA-ph3r-5jfg-f84f, PYSEC-2026-4197 — severity: MODERATE (database_specific.severity of OSV entry GHSA-ph3r-5jfg-f84f)
    • Summary, quoted from the source: “vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core”
    • Aliases listed by OSV: CVE-2026-105753, PYSEC-2026-4197, GHSA-ph3r-5jfg-f84f
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-ph3r-5jfg-f84f
  • vllm (PyPI), published 2026-10-05 — GHSA-85xf-c7hm-whqw, PYSEC-2026-4199 — severity: MODERATE (database_specific.severity of OSV entry GHSA-85xf-c7hm-whqw)
    • Summary, quoted from the source: “vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)”
    • Aliases listed by OSV: CVE-2026-105757, PYSEC-2026-4199, GHSA-85xf-c7hm-whqw
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-85xf-c7hm-whqw
  • vllm (PyPI), published 2026-10-05 — GHSA-58v5-2m8f-94pr — severity: MODERATE (database_specific.severity of OSV entry GHSA-58v5-2m8f-94pr)
    • Summary, quoted from the source: “vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion”
    • Aliases listed by OSV: CVE-2026-105760
    • Affected versions: >= 0.23.0rc2 < 0.30.0 ; enumerated versions: 0.23.0, 0.24.0, 0.25.0, … (+6 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-58v5-2m8f-94pr
  • vllm (PyPI), published 2026-10-05 — GHSA-2phq-3phc-84px, PYSEC-2026-4198 — severity: MODERATE (database_specific.severity of OSV entry GHSA-2phq-3phc-84px)
    • Summary, quoted from the source: “vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on /score and /rerank”
    • Aliases listed by OSV: CVE-2026-105755, PYSEC-2026-4198, GHSA-2phq-3phc-84px
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-2phq-3phc-84px
  • vllm (PyPI), published 2026-10-05 — GHSA-2823-qmq8-rwvj — severity: MODERATE (database_specific.severity of OSV entry GHSA-2823-qmq8-rwvj)
    • Summary, quoted from the source: “vLLM: Loose cache_salt validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream ValueError denial of service”
    • Aliases listed by OSV: CVE-2026-105756
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-2823-qmq8-rwvj
  • sentence-transformers (PyPI), published 2026-10-01 — PYSEC-2026-4164 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “sentence-transformers local model loading bypasses trust_remote_code and executes custom Python”
    • Aliases listed by OSV: CVE-2026-68770, GHSA-jhr6-gm9c-rqjv
    • Affected versions: all versions < 5.6.0 ; enumerated versions: 0.1.0, 0.2.0, 0.2.1, … (+75 more listed by the source)
    • Fixed in: 5.6.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4164
  • vllm (PyPI), published 2026-09-30 — PYSEC-2026-4186 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-103241, which OSV publishes for the same advisory): “vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of service”
    • Aliases listed by OSV: CVE-2026-103241
    • Affected versions: all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source)
    • Fixed in: 0.27.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4186
  • vllm (PyPI), published 2026-09-26 — PYSEC-2026-4185 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-100652, which OSV publishes for the same advisory): “vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids”
    • Aliases listed by OSV: CVE-2026-100652, GHSA-qff2-492f-9fm4
    • Affected versions: >= 0.22.0 < 0.24.0 ; enumerated versions: 0.22.0, 0.22.1, 0.23.0
    • Fixed in: 0.24.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4185
  • vllm (PyPI), published 2026-09-26 — PYSEC-2026-4184 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-100650, which OSV publishes for the same advisory): “vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization”
    • Aliases listed by OSV: CVE-2026-100650, GHSA-p6g9-7v3x-m8mv
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4184
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4008 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94626, which OSV publishes for the same advisory): “vLLM through 0.29.0 Memory Exhaustion via Unvalidated NIXL tp_size”
    • Aliases listed by OSV: CVE-2026-94626
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4008
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4007 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94625, which OSV publishes for the same advisory): “vLLM through 0.29.0 Resource Exhaustion via Ownerless Mooncake Transfer Placeholders”
    • Aliases listed by OSV: CVE-2026-94625
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4007
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4006 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94624, which OSV publishes for the same advisory): “vLLM through 0.29.0 Denial of Service via Unbounded P2P KV Offloading Sessions”
    • Aliases listed by OSV: CVE-2026-94624
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4006
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4005 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94623, which OSV publishes for the same advisory): “vLLM through 0.29.0 Denial of Service via NIXL Multi-Prompt Assertion Failure”
    • Aliases listed by OSV: CVE-2026-94623
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4005
  • vllm (PyPI), published 2026-09-21 — PYSEC-2026-4004 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-94622, which OSV publishes for the same advisory): “vLLM through 0.29.0 Denial of Service via Incomplete NIXL KV Transfer Metadata”
    • Aliases listed by OSV: CVE-2026-94622
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4004
  • vllm (PyPI), published 2026-09-19 — PYSEC-2026-4000 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93989, which OSV publishes for the same advisory): “vLLM through 0.29.0 Cross-Request Logits Corruption via bad_words”
    • Aliases listed by OSV: CVE-2026-93989
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4000
  • vllm (PyPI), published 2026-09-18 — PYSEC-2026-3999 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93841, which OSV publishes for the same advisory): “vLLM through 0.29.0 Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs”
    • Aliases listed by OSV: CVE-2026-93841
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3999
  • vllm (PyPI), published 2026-09-18 — PYSEC-2026-3998 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93840, which OSV publishes for the same advisory): “vLLM before 0.29.0 Cross-Request Logits Corruption via allowed_token_ids”
    • Aliases listed by OSV: CVE-2026-93840
    • Affected versions: all versions < 0.29.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+93 more listed by the source)
    • Fixed in: 0.29.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3998
  • vllm (PyPI), published 2026-09-18 — PYSEC-2026-3997 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93592, which OSV publishes for the same advisory): “vLLM before 0.28.0 Denial of Service via negative token ID”
    • Aliases listed by OSV: CVE-2026-93592, GHSA-25q3-v2hm-8vpf
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3997
  • vllm (PyPI), published 2026-09-17 — PYSEC-2026-3996 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-93436, which OSV publishes for the same advisory): “vLLM through 0.29.0 Memory Exhaustion via Rejected Requests”
    • Aliases listed by OSV: CVE-2026-93436
    • Affected versions: all versions < 0.30.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+94 more listed by the source)
    • Fixed in: 0.30.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3996
  • vllm (PyPI), published 2026-09-17 — GHSA-8pw2-6jv3-mj5j, PYSEC-2026-4178 — severity: MODERATE (database_specific.severity of OSV entry GHSA-8pw2-6jv3-mj5j)
    • Summary, quoted from the source: “vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation”
    • Aliases listed by OSV: CVE-2026-69147, PYSEC-2026-4178, GHSA-8pw2-6jv3-mj5j
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-8pw2-6jv3-mj5j
  • vllm (PyPI), published 2026-09-16 — GHSA-hcwq-8wjf-3gcr, PYSEC-2026-4179 — severity: MODERATE (database_specific.severity of OSV entry GHSA-hcwq-8wjf-3gcr)
    • Summary, quoted from the source: “vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions”
    • Aliases listed by OSV: CVE-2026-57173, PYSEC-2026-4179, GHSA-hcwq-8wjf-3gcr
    • Affected versions: all versions < 0.24.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+86 more listed by the source)
    • Fixed in: 0.24.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-hcwq-8wjf-3gcr
  • vllm (PyPI), published 2026-09-12 — PYSEC-2026-3985 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-90553, which OSV publishes for the same advisory): “vLLM before 0.28.0 Remote Code Execution via LlavaOnevision2 processor”
    • Aliases listed by OSV: CVE-2026-90553, GHSA-3c86-2m5g-59q7
    • Affected versions: all versions < 0.28.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+92 more listed by the source)
    • Fixed in: 0.28.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3985
  • transformers (PyPI), published 2026-09-10 — PYSEC-2026-3929 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source: “Transformers save_pretrained path traversal allows arbitrary file writes through chat template names”
    • Aliases listed by OSV: CVE-2026-9856, GHSA-xrqw-3rrv-vx5w
    • Affected versions: all versions < 5.10.0 ; enumerated versions: 0.1, 2.0.0, 2.1.0, … (+223 more listed by the source)
    • Fixed in: 5.10.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-3929
  • vllm (PyPI), published 2026-09-08 — GHSA-7m6h-x95x-82q5, PYSEC-2026-3935 — severity: MODERATE (database_specific.severity of OSV entry GHSA-7m6h-x95x-82q5)
    • Summary, quoted from the source: “vLLM: Cross-User Data Leak Vulnerability”
    • Aliases listed by OSV: CVE-2026-73558, PYSEC-2026-3935, GHSA-7m6h-x95x-82q5
    • Affected versions: all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source)
    • Fixed in: 0.27.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-7m6h-x95x-82q5
  • vllm (PyPI), published 2026-09-08 — GHSA-4hhp-h66f-j5j7, PYSEC-2026-3934 — severity: MODERATE (database_specific.severity of OSV entry GHSA-4hhp-h66f-j5j7)
    • Summary, quoted from the source: “vLLM: SSRF + arbitrary local file read in MiMoV2OmniMultiModalProcessor _fetch_image and audio loader bypass MediaConnector protections”
    • Aliases listed by OSV: CVE-2026-73560, PYSEC-2026-3934, GHSA-4hhp-h66f-j5j7
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-4hhp-h66f-j5j7
  • vllm (PyPI), published 2026-09-04 — GHSA-pr7f-p5mw-fc87, PYSEC-2026-3938 — severity: MODERATE (database_specific.severity of OSV entry GHSA-pr7f-p5mw-fc87)
    • Summary, quoted from the source: “vLLM: Incomplete CVE-2025-62164 remediation can be bypassed by concurrent prompt parts”
    • Aliases listed by OSV: CVE-2026-73557, PYSEC-2026-3938, GHSA-pr7f-p5mw-fc87
    • Affected versions: >= 0.21.0 < 0.26.0 ; enumerated versions: 0.21.0, 0.22.0, 0.22.1, … (+4 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-pr7f-p5mw-fc87
  • vllm (PyPI), published 2026-09-04 — GHSA-hwrm-c4cx-rf4j, PYSEC-2026-3937 — severity: MODERATE (database_specific.severity of OSV entry GHSA-hwrm-c4cx-rf4j)
    • Summary, quoted from the source: “vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error Messages”
    • Aliases listed by OSV: CVE-2026-73555, PYSEC-2026-3937, GHSA-hwrm-c4cx-rf4j
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
    • Source entry: https://osv.dev/vulnerability/GHSA-hwrm-c4cx-rf4j
  • vllm (PyPI), published 2026-09-04 — GHSA-8737-qx52-hjff, PYSEC-2026-3936 — severity: MODERATE (database_specific.severity of OSV entry GHSA-8737-qx52-hjff)
    • Summary, quoted from the source: “vLLM: Derender endpoints decode caller-supplied GenerateResponse token IDs without output bounds”
    • Aliases listed by OSV: CVE-2026-71486, PYSEC-2026-3936, GHSA-8737-qx52-hjff
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-8737-qx52-hjff
  • vllm (PyPI), published 2026-09-04 — GHSA-48jh-3gj7-fg8v, PYSEC-2026-3933 — severity: MODERATE (database_specific.severity of OSV entry GHSA-48jh-3gj7-fg8v)
    • Summary, quoted from the source: “vLLM: ReDoS via structured_outputs.regex in the lm-format-enforcer backend (no compile timeout) — missed sibling of GHSA-rwxx-mrjm-wc2m”
    • Aliases listed by OSV: CVE-2026-73556, PYSEC-2026-3933, GHSA-48jh-3gj7-fg8v
    • Affected versions: all versions < 0.26.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+89 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
    • Source entry: https://osv.dev/vulnerability/GHSA-48jh-3gj7-fg8v
  • transformers (PyPI), published 2026-09-01 — GHSA-x9r9-c232-4q39, PYSEC-2026-4174 — severity: HIGH (database_specific.severity of OSV entry GHSA-x9r9-c232-4q39)
    • Summary, quoted from the source: “Hugging Face Transformers downloads custom generation code before trust consent”
    • Aliases listed by OSV: CVE-2026-80047, PYSEC-2026-4174, GHSA-x9r9-c232-4q39
    • Affected versions: >= 4.49.0 <= 5.8.1 ; enumerated versions: 4.49.0, 4.50.0, 4.50.1, … (+52 more listed by the source)
    • Fixed in: not provided by the source
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-x9r9-c232-4q39
  • vllm (PyPI), published 2026-08-25 — PYSEC-2026-4003 — severity: not provided by the source — this OSV entry has no database_specific.severity; its severity field carries only a CVSS vector, quoted in full below
    • Summary, quoted from the source (summary read from the identifier CVE-2026-78684, which OSV publishes for the same advisory): “vLLM before 0.27.0 Denial of Service via DeepStream Backend”
    • Aliases listed by OSV: CVE-2026-78684, GHSA-cqm8-jxg6-fqfq
    • Affected versions: all versions < 0.27.0 ; enumerated versions: 0.0.1, 0.1.0, 0.1.1, … (+90 more listed by the source)
    • Fixed in: 0.27.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
    • Source entry: https://osv.dev/vulnerability/PYSEC-2026-4003
  • vllm (PyPI), published 2026-08-13 — GHSA-87x5-vmc3-756j, PYSEC-2026-3704 — severity: MODERATE (database_specific.severity of OSV entry GHSA-87x5-vmc3-756j)
    • Summary, quoted from the source: “vLLM: Completion prompt lists fan out into unbounded engine requests”
    • Aliases listed by OSV: CVE-2026-73559, PYSEC-2026-3704, GHSA-87x5-vmc3-756j
    • Affected versions: >= 0.19.0 < 0.26.0 ; enumerated versions: 0.19.0, 0.19.1, 0.20.0, … (+9 more listed by the source)
    • Fixed in: 0.26.0
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
    • Source entry: https://osv.dev/vulnerability/GHSA-87x5-vmc3-756j
  • accelerate (PyPI), published 2026-08-10 — GHSA-4j2p-28q2-5m79, PYSEC-2026-3804 — severity: MODERATE (database_specific.severity of OSV entry GHSA-4j2p-28q2-5m79)
    • Summary, quoted from the source: “Accelerate path traversal and denial of service via sharded checkpoint weight_map entries”
    • Aliases listed by OSV: CVE-2026-69112, PYSEC-2026-3804, GHSA-4j2p-28q2-5m79
    • Affected versions: all versions <= 1.14.0 ; enumerated versions: 0.0.1, 0.1.0, 0.10.0, … (+79 more listed by the source)
    • Fixed in: not provided by the source
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H
    • CVSS vector, copied character for character from the source (no score is computed by us): CVSS_V4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:H/VI:N/VA:H/SC:N/SI:N/SA:N
    • Source entry: https://osv.dev/vulnerability/GHSA-4j2p-28q2-5m79

How this page is built

  • Data read live from the OSV (api.osv.dev/v1/query) on 2026-10-09 (server clock); the exact read window is kept in the dated state file. Nothing on this page predates that read, and nothing on it was written earlier.
  • Window: advisories whose published field falls on or after 2026-08-10 (the last 60 days). Entries outside that window are skipped, however severe they look.
  • Exact package names and ecosystems queried (25 queries, one POST request each): torch (PyPI), transformers (PyPI), vllm (PyPI), langchain (PyPI), langchain-core (PyPI), openai (PyPI), llama-index (PyPI), sentence-transformers (PyPI), accelerate (PyPI), diffusers (PyPI), gradio (PyPI), fastapi (PyPI), pydantic (PyPI), numpy (PyPI), pillow (PyPI), aiohttp (PyPI), requests (PyPI), safetensors (PyPI), onnxruntime (PyPI), xgboost (PyPI), scikit-learn (PyPI), tensorflow (PyPI), openai (npm), langchain (npm), @langchain/core (npm).
  • 25 of 25 queries returned a valid answer. None failed.
  • Identifiers, summaries, affected ranges and fixed versions are copied verbatim from the API response. Where OSV lists the same vulnerability under more than one identifier (a GitHub advisory and a PyPA entry sharing one CVE), the entries are grouped and every identifier of the group is shown.
  • Severity appears only when the source provides it: either database_specific.severity (the entry's own word, for example MODERATE) or a CVSS vector from the severity field, quoted character for character and attributed to the entry that carries it. No score is computed, converted or averaged on this page.
  • No assessment of our own: no exploitability claim, no priority ranking, no affected-product reasoning. This is a reading of a database, not an audit.
  • No human reviewed this page before publication. It is written by pipelines/stack_advisories.py and published unread. If the API is unavailable, the run fails and the page is left as it was — an empty page is never substituted for a failed collection.
  • Source of record: https://api.osv.dev/v1/query (POST, JSON body) · entry detail: https://osv.dev/vulnerability/
stack-advisoriessecuritysupply-chainosvftl-lab
Share this article:

Was this article helpful?

Let us know to improve our AI generation.