xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-49119 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...

iopaint (>=1.0.0b11, <=1.2.2), lisa-on-cuda (>=1.4.2, <=1.4.8) +4 more potentially affected by CVE-2026-10783 via gradio (5.1.0)

gradio PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - iopaint =1.0.0b11, =1.4.2, =0.2.0, =0.1.6, =0.15.0, =0.16.0 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-10783 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-10783 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-10783 Source advisory: OSV:PYSEC-2026-211...

iopaint (>=1.0.0b11, <=1.2.2), lisa-on-cuda (>=1.4.2, <=1.4.8) +4 more potentially affected by CVE-2026-10783 via gradio (5.1.0)

gradio PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - iopaint =1.0.0b11, =1.4.2, =0.2.0, =0.1.6, =0.15.0, =0.16.0 Source cves: CVE-2026-10783 Source advisory: OSV:PYSEC-2026-211...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-48545 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-48545 Source advisory: OSV:GHSA-7HP7-4P35-3CX2...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-48545 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-48545 Source advisory: OSV:PYSEC-2026-2178...

MAL-2026-3000 Malicious code in xinference (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d006f6a08c959393160456d4ace221fd165b6d609fc8356ebfb041979aef93d Versions 2.6.0, 2.6.1, 2.6.2 were compromised. Following a malicious pull request that exfiltrated sensitive data from the CI runner, three malicious PyPI...

Malicious code in xinference (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1d006f6a08c959393160456d4ace221fd165b6d609fc8356ebfb041979aef93d Versions 2.6.0, 2.6.1, 2.6.2 were compromised. Following a malicious pull request that exfiltrated sensitive data from the CI runner, three malicious PyPI...

Embedded Malicious Code

Overview xinference is a powerful and versatile library designed to serve language, speech recognition, and multimodal models. With Xorbits Inference, you can effortlessly deploy and serve your or state-of-the-art built-in models using just a single command. Whether you are a researcher, develope...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-28416 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28416 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28416 Source advisory: OSV:GHSA-JMH7-G254-2CQ9...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28416 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28416 Source advisory: GHSA-JMH7-G254-2CQ9...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-28415 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-28415 Source advisory: OSV:GHSA-PFJF-5GXR-995X...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28415 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28415 Source advisory: GHSA-PFJF-5GXR-995X...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-28414 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28414 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28414 Source advisory: GHSA-39MP-8HJ3-5C49...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-28414 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-28414 Source advisory: OSV:GHSA-39MP-8HJ3-5C49...

bitwiseai (>=0.1.2, <=0.1.3), daggr (>=0.5.2, <=0.5.3) +3 more potentially affected by CVE-2026-27167 via gradio (>=6.0.0.dev5, <=6.4.0)

gradio PYPI version =6.0.0.dev5, =0.1.2, =0.5.2, =1.14.0, =2.12.0 Source cves: CVE-2026-27167 Source advisory: SNYK:PYTHON-GRADIO-15366402...

xinference (>=0.10.1, <=0.14.4.post1) potentially affected by CVE-2026-28414 via gradio (4.26.0)

gradio PYPI version 4.26.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - xinference =0.10.1, =0.14.4.post1 Source cves: CVE-2026-28414 Source advisory: OSV:PYSEC-2026-64...