EUVD-2026-117123

A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function getmlxresponse of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be launched remotely...

CVE-2026-122015

A vulnerability exists in NPC-Worldwide npcpy versions up to 2.1.27 within the MLX Provider component. The issue is located in the get_mlx_response function of the npcpy/gen/response.py file, where manipulation of the model argument leads to improper input validation (CWE-20). This vulnerability ...