Threats affecting pkg:github/unsloth-zoo

Unsloth Zoo versions from 2025.9.9 up to but not including 2026.8.14 contain a code injection vulnerability in the model-loading compile path. The vulnerability arises because the get_transformers_model_type() function does not enforce a character allowlist on model_type values, allowing malicious input to inject arbitrary Python code. This can lead to remote code execution when a malicious model is loaded for training or inference.