98 matches found
About the security content of macOS Tahoe 26.7
About the security content of macOS Tahoe 26.7 This document describes the security content of macOS Tahoe 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
About the security content of watchOS 27
About the security content of watchOS 27 This document describes the security content of watchOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...
About the security content of macOS Golden Gate 27
About the security content of macOS Golden Gate 27 This document describes the security content of macOS Golden Gate 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
About the security content of iOS 26.7 and iPadOS 26.7
About the security content of iOS 26.7 and iPadOS 26.7 This document describes the security content of iOS 26.7 and iPadOS 26.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...
About the security content of iOS 27 and iPadOS 27
About the security content of iOS 27 and iPadOS 27 This document describes the security content of iOS 27 and iPadOS 27. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
PYSEC-2026-3804 Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
GHSA-4J2P-28Q2-5M79 vulnerabilities
Vulnerabilities for packages: py3-accelerate-cuda-12.9, vllm-openai-cuda-13.0, nemo, vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0...
CVE-2026-69112 vulnerabilities
Vulnerabilities for packages: py3-accelerate-cuda-12.9, vllm-openai-cuda-13.0, nemo, vllm-openai-cuda-12.9, py3-accelerate-cuda-13.0...
CVE-2026-69112
A flaw was found in Hugging Face Accelerate. This path traversal vulnerability exists in the loadcheckpointinmodel and loadcheckpointanddispatch functions due to a failure to sanitize weightmap entries from sharded checkpoint indexes. An attacker can exploit this by supplying relative paths with...
3-04-2025-ttm (0.1.0), a2 (>=0.10.5, <=0.10.13) +3345 more potentially affected by CVE-2026-69112 via accelerate (>=0.5.1, <=1.14.0)
accelerate PYPI version =0.5.1, =0.10.5, =5.0.0, =5.0.6 - aait-store-cut-part-001 0.0.1 - aait-store-cut-part-002 0.0.1 - aait-store-cut-part-003 0.0.1 - aait-store-cut-part-004 0.0.1 - aait-store-cut-part-005 0.0.1 - aait-store-cut-part-006 0.0.1 - aait-store-cut-part-007 0.0.1 -...
Directory Traversal
Overview accelerate is an Accelerate Affected versions of this package are vulnerable to Directory Traversal via loadcheckpointinmodel and loadcheckpointanddispatch through sharded-checkpoint weightmap handling in src/accelerate/utils/modeling.py. An attacker can make the loader read arbitrary...
GHSA-4J2P-28Q2-5M79 Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
EUVD-2026-55743
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112 Hugging Face Accelerate 1.14.0 Path Traversal and DoS via weight_map
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...
CVE-2026-69112
Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...