Threats Tagged 'ghsa-g7pc-47rc-wvwf'

1 threat

Threats Tagged 'ghsa-g7pc-47rc-wvwf'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.5%	CVE-2026-71281peft · CWE-502 High8.8EPSS 0.5%2026-08-05CVE Database V5CVE-2026-71281 Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.py line ~101) call torch.load on config-specified cache/covariance files without weights_only=True, bypassing peft's own safe-loading wrapper used elsewhere in the codebase. EPSS 0.5%Vulnerability huggingface #cwe-502 #ghsa-g7pc-47rc-wvwf	CVE Database V5	2026-08-05

Showing 1–1 of 1 result