trinity-rft (>=0.1.0 <=0.5.2) potentially affected by CVE-2026-6878 via verl (>=0.3.0.post1 <=0.7.1)

verl PYPI version =0.3.0.post1, =0.1.0, =0.5.2 Source cves: CVE-2026-6878 Source advisory: OSV:GHSA-H57C-V2V3-5V3V...

trinity-rft (>=0.1.0 <=0.5.2) potentially affected by CVE-2026-6878 via verl (>=0.3.0.post1 <=0.7.1)

verl PYPI version =0.3.0.post1, =0.1.0, =0.5.2 Source cves: CVE-2026-6878 Source advisory: SNYK:PYTHON-VERL-16635277...

CVE-2026-6878

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

CVE-2026-6878

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...