Alta
CVE-2026-31224
Archivo de vulnerabilidades
Conoce las vulnerabilidades. Protege tus aplicaciones.
Descubre qué vulnerabilidades afectan a tus tecnologías y cómo solucionarlas. Encuentra explicaciones claras, versiones afectadas y recomendaciones prácticas - desde CMS y plugins hasta bibliotecas de aplicaciones.
Archivo de vulnerabilidades 152
Restablecer filtros
Alta
CVE-2026-31222
Snorkel Trainer.load uses an unsafe torch.load
Alta
CVE-2026-31253
flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
Alta
CVE-2026-53875
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER
Alta
CVE-2025-71322
Picklescan Bypasses Unsafe Globals Check using pty.spawn
Media
CVE-2025-71339
Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length
Alta
CVE-2025-67729
lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()
Media
CVE-2025-68146
filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
Alta
CVE-2025-62164
vLLM deserialization vulnerability leading to DoS and potential RCE
Alta
CVE-2025-71344
Picklescan is missing detection when calling built-in python ensurepip._run_pip
Alta
CVE-2025-71361
Picklescan has a missing detection when calling built-in python idlelib.calltip.Calltip
Alta
CVE-2025-71358
Picklescan has a missing detection when calling built-in python idlelib.autocomplete.AutoComplete.get_entity
Alta
CVE-2025-71354
Picklescan has a missing detection when calling built-in python idlelib.debugobj.ObjectTreeItem
Media
CVE-2025-5197
Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Media
CVE-2025-54952
ExecuTorch integer overflow vulnerability leads to code execution
Alta
CVE-2025-53002
LLaMA-Factory allows Code Injection through improper vhead_file safeguards
Media
CVE-2025-5150
docarray prototype pollution
Media
CVE-2025-3730
PyTorch Improper Resource Shutdown or Release vulnerability
Alta
CVE-2025-30202
Data exposure via ZeroMQ on multi-node vLLM deployment
Media
CVE-2025-46567
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Media
CVE-2024-6577
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
Alta
CVE-2024-35199
TorchServe gRPC Port Exposure
Media
CVE-2024-41129
ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command
Alta
CVE-2024-37059
MLFlow unsafe deserialization
Identifica las vulnerabilidades de tu aplicación
Con la integración de DockRay y el inventario de software activado, DockRay compara las versiones notificadas de los componentes con las vulnerabilidades conocidas y avisa de las coincidencias confirmadas. La cobertura depende de la tecnología compatible y de los avisos disponibles.