CVE-2026-108957

A security flaw exists in TinyLLaVA TinyLLaVA_Factory (up to commit 1abc6ac5e76a68d0fd087a071b56da968e69ca9b). The vulnerability is located in the _load_text_config function within tinyllava/model/configuration_tinyllava.py of the TinyLlavaConfig component. By manipulating the llm_model_name_or_p...

EUVD-2026-98266

A security flaw has been discovered in TinyLLaVA TinyLLaVAFactory up to 1abc6ac5e76a68d0fd087a071b56da968e69ca9b. The impacted element is the function loadtextconfig of the file tinyllava/model/configurationtinyllava.py of the component TinyLlavaConfig. Performing a manipulation of the argument...