Threats affecting pkg:github/npc-worldwide/npcpy

A vulnerability in NPC-Worldwide npcpy up to version 2.1.27 affects the get_mlx_response function in the MLX Provider component. The flaw involves improper input validation of the 'model' argument, which can be exploited remotely. Public exploit code is available. The CVSS score is 6.3, indicating a medium severity impact.