Threats tagged 'ghsa-9xq9-36w5-q796'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.8	EPSS 0.2%	CVE-2026-46517InternLM lmdeploy · Code Injection High7.8EPSS 0.2%2026-06-09CVE Database V5CVE-2026-46517 LMDeploy is a toolkit for compressing, deploying, and serving large language models. In versions 0.12.3 and prior, hardcoded "trust_remote_code=True" enables HF supply-chain RCE without user opt-in. Version 0.13.0 patches the issue. EPSS 0.2%Vulnerability CWE-94 #ghsa-9xq9-36w5-q796 #pypi	CVE Database V5	2026-06-09

Page 1 of 1