trinity-rft (>=0.1.0, <=0.3.0) potentially affected by CVE-2026-6878 via verl (>=0.3.0.post1, <=0.5.0)

verl PYPI version =0.3.0.post1, =0.1.0, =0.3.0 Source cves: CVE-2026-6878 Source advisory: SNYK:PYTHON-VERL-16635277...

CVE-2026-6878

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

CVE-2026-6878

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...