PT-2026-40063

Name of the Vulnerable Software and Affected Versions snorkel versions prior to 0.10.1 Description Insecure deserialization occurs in the MultitaskClassifier.load method of the MultitaskClassifier class. The method utilizes torch.load to load model weight files without enabling the weights...

CVE-2026-31224

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...

CVE-2026-31223

The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability CWE-502 in the BaseLabeler.load method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load function on user-supplied file paths without any validation or...

CVE-2026-31223

The snorkel library up to v0.10.0 has a CWE-502 insecure deserialization in BaseLabeler.load() that uses unsafe pickle.load() on user-supplied file paths, enabling a remote attacker to deliver a malicious pickle and achieve arbitrary code execution when loaded. Affected component: BaseLabeler (sn...

PT-2026-40122

Name of the Vulnerable Software and Affected Versions imgaug versions prior to 0.4.0 Description Insecure deserialization occurs in the BackgroundAugmenter class within the multicore.py module. The augment images worker function uses Python's pickle module to deserialize data from a multiprocessi...

CVE-2026-31218

The optimate project, an AI model optimization tool library developed by Nebuly, contains an insecure deserialization vulnerability (CWE-502) in the _load_model() function of the neural_magic_training.py script (commit a6d302f912b481c94370811af6b11402f51d377f). The root cause is the failure to en...

PT-2026-40119

The CosyVoice project thru commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e 2025-30-21 contains an insecure deserialization vulnerability CWE-502 in its model loading process. When loading model files .pt from a user-specified directory via the --model dir argument, the code uses torch.load withou...

CVE-2026-31237

The Ludwig framework (versions through 0.10.4 ) is vulnerable to insecure deserialization (CWE-502) within its predict() method. The issue occurs because the framework automatically identifies dataset file formats and uses pandas.read_pickle() to load .pkl files without any validation or security...

CVE-2026-31219

The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 is vulnerable to insecure deserialization CWE-502. When a user provides a single model file path e.g., .pt or .pth via the --model command-line argumen...

CVE-2026-31222

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the Trainer.load method of the Trainer class. The method loads model checkpoint files using torch.load without enabling the security-restrictive weightsonly=True parameter. This default behavior allows...

CVE-2026-31235

The imgaug library, versions 0.4.0 and earlier , is vulnerable to an insecure deserialization flaw in the BackgroundAugmenter class within the multicore.py module. The vulnerability exists because the _augment_images_worker() method uses Python's pickle module to deserialize data from a multiproc...

CVE-2026-31232

The CosyVoice project (up to commit 6e01309e01bc93bbeb83bdd996b1182a81aaf11e) is vulnerable to an insecure deserialization (CWE-502) flaw during its model loading process. The application uses torch.load() to process .pt model files from a user-specified directory (via the --model_dir argument) w...

CVE-2026-31223

The snorkel library thru v0.10.0 contains a critical insecure deserialization vulnerability CWE-502 in the BaseLabeler.load method of the BaseLabeler class. The method loads serialized labeler models using the unsafe pickle.load function on user-supplied file paths without any validation or...

CVE-2026-31229

The Adversarial Robustness Toolbox (ART) versions thru 1.20.1 are vulnerable to an insecure deserialization (CWE-502) flaw within the Kubeflow component 's model loading functionality. The root cause is the use of torch.load() to process model weights (e.g., model.pt) without the security-restric...

CVE-2026-31219

The optimate project, an AI model optimization tool library by Nebuly, contains an insecure deserialization (CWE-502) vulnerability in the _load_model() function of the neural_magic_training.py script (commit a6d302f912b481c94370811af6b11402f51d377f). The issue occurs because the function uses to...

PT-2026-40058

The load model function in the neural magic training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 is vulnerable to insecure deserialization CWE-502. When a user provides a single model file path e.g., .pt or .pth via the --model command-line...

PT-2026-40057

The load model function in the neural magic training.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 is vulnerable to insecure deserialization CWE-502. When loading a model state dictionary from a state dict.pt file via torch.load, the function does...

GHSA-7G5W-PQ96-8C5W flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains an insecure deserialization vulnerability CWE-502 in its checkpoint loading mechanism. The loadcheckpoint function in checkpoint.py and the checkpoint loading code in eval.py use...

flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains an insecure deserialization vulnerability CWE-502 in its checkpoint loading mechanism. The loadcheckpoint function in checkpoint.py and the checkpoint loading code in eval.py use...

EUVD-2026-29100

The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains an insecure deserialization vulnerability CWE-502 in its checkpoint loading mechanism. The loadcheckpoint function in checkpoint.py and the checkpoint loading code in eval.py use...