CVE-2026-126995 tjake Jlama SafeTensorIndex.java SafeTensorIndex.loadWeights path traversal

A vulnerability was found in tjake Jlama up to 0.8.4/0.9.0-beta. Affected by this vulnerability is the function SafeTensorIndex.loadWeights of the file jlama-core/src/main/java/com/github/tjake/jlama/safetensors/SafeTensorIndex.java. Performing a manipulation of the argument weightmap results in...

EUVD-2026-124478

A vulnerability was found in tjake Jlama up to 0.8.4/0.9.0-beta. Affected by this vulnerability is the function SafeTensorIndex.loadWeights of the file jlama-core/src/main/java/com/github/tjake/jlama/safetensors/SafeTensorIndex.java. Performing a manipulation of the argument weightmap results in...

CVE-2026-126995

A path traversal vulnerability exists in tjake Jlama versions up to 0.8.4/0.9.0-beta . The flaw is located in the SafeTensorIndex.loadWeights function within the file jlama-core/src/main/java/com/github/tjake/jlama/safetensors/SafeTensorIndex.java. By manipulating the weight_map argument, an atta...