PT-2026-94673

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A race condition exists in the blkcg activate policy function when switching IO schedulers on a block device. This occurs when the function races with a concurrent blkcg deletion, which...

About the security content of macOS Tahoe 26.7

Download JSON About the security content of macOS Tahoe 26.7 This document describes the security content of macOS Tahoe 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Golden Gate 27

Download JSON About the security content of macOS Golden Gate 27 This document describes the security content of macOS Golden Gate 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of iOS 27 and iPadOS 27

Download JSON About the security content of iOS 27 and iPadOS 27 This document describes the security content of iOS 27 and iPadOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

About the security content of watchOS 27

Download JSON About the security content of watchOS 27 This document describes the security content of watchOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

About the security content of iOS 26.7 and iPadOS 26.7

Download JSON About the security content of iOS 26.7 and iPadOS 26.7 This document describes the security content of iOS 26.7 and iPadOS 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurre...

autotrain-advanced (>=0.7.2, <=0.7.7) potentially affected by CVE-2026-69112 via accelerate (0.27.0)

accelerate PYPI version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.2, =0.7.7 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

autotrain-advanced (>=0.7.102, <=0.7.118), documentsreader (1.1.5) +14 more potentially affected by CVE-2026-69112 via accelerate (0.30.1)

accelerate PYPI version 0.30.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.102, =0.122.0, =4.2.4, =0.0.1, =7.7.0, =0.0.1rc6, =0.6.6, =0.1.0, =0.0.1, =0.0.1, =1.0.1 and more Source cves:...

PYSEC-2026-3804 Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...

ag-llama-api (>=0.0.1, <=0.0.31), ag-llama-api-s (>=0.0.4, <=0.0.12) +23 more potentially affected by CVE-2026-69112 via accelerate (0.20.3)

accelerate PYPI version 0.20.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - ag-llama-api =0.0.1, =0.0.4, =0.0.4, =0.0.11, =0.0.13, =0.0.15, =1.15.3, =1.16.3, =0.0.1, =2.0.0, =2.0.1.post2 - portfolio-agent 0.3.0rc1 a...

agilerl (>=0.1.6, <=2.0.6), aihandler (>=1.8.15, <=1.10.2) +8 more potentially affected by CVE-2026-69112 via accelerate (0.18.0)

accelerate PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - agilerl =0.1.6, =1.8.15, =1.8.17, =1.8.14, =0.0.1rc2, =0.0.1rc4 - open-gpts 0.0.1rc1 - pytorch-accelerated 0.1.45 Source cves: CVE-2026-691...

aihandler (>=1.10.3, <=1.15.7), airunner (>=1.11.0, <=1.16.11) +6 more potentially affected by CVE-2026-69112 via accelerate (0.19.0)

accelerate PYPI version 0.19.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - aihandler =1.10.3, =1.11.0, =0.1.0, =0.2.7, =1.3.7, =0.1.0, =0.3.1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

pytorch-clip-interrogator (>=2023.2.19.0, <=2023.2.19.1), stochasticx (>=0.0.14, <=0.0.19) +2 more potentially affected by CVE-2026-69112 via accelerate (0.14.0)

accelerate PYPI version 0.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - pytorch-clip-interrogator =2023.2.19.0, =0.0.14, =0.1.0, =0.0.7, =0.0.9 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

l2hmc (>=0.1.0, <=0.2.0), pytorch-accelerated (>=0.1.2, <=0.1.25) +1 more potentially affected by CVE-2026-69112 via accelerate (0.5.1)

accelerate PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - l2hmc =0.1.0, =0.1.2, =0.1.0, =0.1.1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

textrpp-py (0.1.0) potentially affected by CVE-2026-69112 via accelerate (0.26.0)

accelerate PYPI version 0.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - textrpp-py 0.1.0 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

imagen-pytorch (>=0.21.0, <=0.22.10), pytorch-accelerated (>=0.1.29, <=0.1.40) +1 more potentially affected by CVE-2026-69112 via accelerate (0.10.0)

accelerate PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - imagen-pytorch =0.21.0, =0.1.29, =0.7.0, =0.7.1 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

autotrain-advanced (>=0.7.53, <=0.7.101), dora-distil-whisper (>=0.3.6, <=0.3.8) +7 more potentially affected by CVE-2026-69112 via accelerate (0.29.3)

accelerate PYPI version 0.29.3 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced =0.7.53, =0.3.6, =0.0.1a0, =0.1.0, =0.2.0, =0.1.0, =0.1.2 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-38...

autotrain-advanced (0.7.44) potentially affected by CVE-2026-69112 via accelerate (0.29.0)

accelerate PYPI version 0.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autotrain-advanced 0.7.44 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

azureml-acft-accelerator (>=0.0.2, <=0.0.8) potentially affected by CVE-2026-69112 via accelerate (0.11.0)

accelerate PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - azureml-acft-accelerator =0.0.2, =0.0.8 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...

autobiasdetector (0.0.2) potentially affected by CVE-2026-69112 via accelerate (0.30.0)

accelerate PYPI version 0.30.0 is affected by a known vulnerability. The following packages have a transitive dependency on accelerate and may be impacted: - autobiasdetector 0.0.2 Source cves: CVE-2026-69112 Source advisory: OSV:PYSEC-2026-3804...