lazyllm-llamafactory (>=0.9.4.dev0, <=0.9.4.dev1) potentially affected by CVE-2026-49119 via gradio (5.45.0)

gradio PYPI version 5.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory =0.9.4.dev0, =0.9.4.dev1 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

jllama-py (>=1.0.0, <=1.1.14), llamafactory (0.9.3) potentially affected by CVE-2026-49119 via gradio (5.31.0)

gradio PYPI version 5.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - jllama-py =1.0.0, =1.1.14 - llamafactory 0.9.3 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

lazyllm-llamafactory (0.9.3.dev0) potentially affected by CVE-2026-49119 via gradio (5.25.0)

gradio PYPI version 5.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory 0.9.3.dev0 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

jllama-py (>=1.0.0, <=1.1.14), llamafactory (0.9.3) potentially affected by CVE-2026-49119 via gradio (5.31.0)

gradio PYPI version 5.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - jllama-py =1.0.0, =1.1.14 - llamafactory 0.9.3 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

ksaa (>=2025.3.15.0, <=2025.11.0b3), llamafactory (0.9.2) potentially affected by CVE-2026-49119 via gradio (5.21.0)

gradio PYPI version 5.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - ksaa =2025.3.15.0, =2025.11.0b3 - llamafactory 0.9.2 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

Unsafe Dependency Resolution

Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Unsafe Dependency Resolution via the model path parameter in the WebUI Chat or Training interfaces. An attacker can execute arbitrary Python code on the server by supplying a...

jllama-py (>=1.0.0, <=1.1.14), llamafactory (0.9.3) potentially affected by CVE-2026-10783 via gradio (5.31.0)

gradio PYPI version 5.31.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - jllama-py =1.0.0, =1.1.14 - llamafactory 0.9.3 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

lazyllm-llamafactory (0.9.3.dev0) potentially affected by CVE-2026-10783 via gradio (5.25.0)

gradio PYPI version 5.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory 0.9.3.dev0 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

lazyllm-llamafactory (>=0.9.4.dev0, <=0.9.4.dev1) potentially affected by CVE-2026-10783 via gradio (5.45.0)

gradio PYPI version 5.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory =0.9.4.dev0, =0.9.4.dev1 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

CVE-2025-46567

creationtimestamp| type| source ---|---|--- 2025-04-23 08:41:15+00:00| published-proof-of-concept| https://github.com/hiyouga/LlamaFactory/security/advisories/GHSA-f2f7-gj54-6vpv...

Command Injection

Overview llamafactory is an Easy-to-use LLM fine-tuning framework Affected versions of this package are vulnerable to Command Injection insecure usage of the Popen function with shell=True, coupled with unsanitized user input. An attacker can execute arbitrary commands on the operating system,...

Clone LlamaCore and LlamaPolicy in LlamaFactory.sol may fail or DOS

Lines of code Vulnerability details Impact LlamaFactory uses Clones.cloneDeterministic to create new LlamaCore and LlamaPolicy contracts. The address of the new PrivatePool depends solely on the name parameter keccak256abi.encodePackedname provided by the administrator when calling the deploy...