evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +6 more potentially affected by CVE-2026-100653 via vllm (>=0.22.1, <=0.27.1)

vllm PYPI version =0.22.1, =0.1.0, =2.8.0, =2.2.2, =0.1.10, =0.1.0, =0.1.3 Source cves: CVE-2026-100653 Source advisory: SNYK:PYTHON-VLLM-20158365...

caption-flow (>=0.5.0, <=0.5.1), evoke-vllm (>=0.1.0, <=0.1.1) +8 more potentially affected by CVE-2026-93840 via vllm (>=0.19.0, <=0.28.0)

vllm PYPI version =0.19.0, =0.5.0, =0.1.0, =2.5.3, =0.1.1.4, =2.1.2, =0.1.10, =0.1.0, =0.1.4 Source cves: CVE-2026-93840 Source advisory: MEND:CVE-2026-93840...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-73557 via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.1 Source cves: CVE-2026-73557 Source advisory: OSV:PYSEC-2026-3938...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-73557 via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.1 Source cves: CVE-2026-73557 Source advisory: OSV:GHSA-PR7F-P5MW-FC87...

evoke-vllm (>=0.1.0, <=0.1.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2025-62164 +1 more via vllm (>=0.21.0, <=0.25.1)

vllm PYPI version =0.21.0, =0.1.0, =2.8.0, =2.1.2, =0.1.10, =0.2.1 Source cves: CVE-2025-62164, CVE-2026-73557 Source advisory: GHSA-PR7F-P5MW-FC87...

caption-flow (>=0.5.0, <=0.5.1), evoke-vllm (>=0.1.0, <=0.1.1) +5 more potentially affected by CVE-2026-73559 via vllm (>=0.19.0, <=0.25.1)

vllm PYPI version =0.19.0, =0.5.0, =0.1.0, =2.5.3, =0.1.1.4, =2.1.2, =0.1.10, =0.2.1 Source cves: CVE-2026-73559 Source advisory: OSV:GHSA-87X5-VMC3-756J...

caption-flow (>=0.5.0, <=0.5.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-54234 via vllm (>=0.19.0, <=0.23.0)

vllm PYPI version =0.19.0, =0.5.0, =2.5.3, =0.1.1.4, =2.1.2, =2.2.4 Source cves: CVE-2026-54234 Source advisory: OSV:PYSEC-2026-3542...

caption-flow (>=0.5.0, <=0.5.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-54234 via vllm (>=0.19.0, <=0.23.0)

vllm PYPI version =0.19.0, =0.5.0, =2.5.3, =0.1.1.4, =2.1.2, =2.2.4 Source cves: CVE-2026-54234 Source advisory: OSV:GHSA-8WR5-JM2H-8R4F...

caption-flow (>=0.5.0, <=0.5.1), lazyllm-verl (0.3.2.dev1) +3 more potentially affected by CVE-2026-54234 via vllm (>=0.19.0, <=0.23.0)

vllm PYPI version =0.19.0, =0.5.0, =2.5.3, =0.1.1.4, =2.1.2, =2.2.4 Source cves: CVE-2026-54234 Source advisory: GHSA-8WR5-JM2H-8R4F...

gpt-sovits-cpufast (0.1.0), lazyllm (>=0.3.0, <=0.6.3) potentially affected by CVE-2026-49119 via gradio (5.0.0b10)

gradio PYPI version 5.0.0b10 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gpt-sovits-cpufast 0.1.0 - lazyllm =0.3.0, =0.6.3 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

lazyllm-llamafactory (>=0.9.4.dev0, <=0.9.4.dev1) potentially affected by CVE-2026-49119 via gradio (5.45.0)

gradio PYPI version 5.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory =0.9.4.dev0, =0.9.4.dev1 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

axolotl (0.13.0.dev0), lazyllm (>=0.7.0, <=0.7.2) +5 more potentially affected by CVE-2026-49119 via gradio (5.49.1)

gradio PYPI version 5.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - axolotl 0.13.0.dev0 - lazyllm =0.7.0, =0.1.4, =0.1.7, =0.4.1 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

lazyllm-llamafactory (0.9.3.dev0) potentially affected by CVE-2026-49119 via gradio (5.25.0)

gradio PYPI version 5.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory 0.9.3.dev0 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

gpt-sovits-cpufast (0.1.0), lazyllm (>=0.3.0, <=0.6.3) potentially affected by CVE-2026-10783 via gradio (5.0.0b10)

gradio PYPI version 5.0.0b10 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - gpt-sovits-cpufast 0.1.0 - lazyllm =0.3.0, =0.6.3 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

axolotl (0.13.0.dev0), lazyllm (>=0.7.0, <=0.7.2) +5 more potentially affected by CVE-2026-10783 via gradio (5.49.1)

gradio PYPI version 5.49.1 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - axolotl 0.13.0.dev0 - lazyllm =0.7.0, =0.1.4, =0.1.7, =0.4.1 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

lazyllm-llamafactory (0.9.3.dev0) potentially affected by CVE-2026-10783 via gradio (5.25.0)

gradio PYPI version 5.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory 0.9.3.dev0 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

lazyllm-llamafactory (>=0.9.4.dev0, <=0.9.4.dev1) potentially affected by CVE-2026-10783 via gradio (5.45.0)

gradio PYPI version 5.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory =0.9.4.dev0, =0.9.4.dev1 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

EUVD-2025-31168

Malicious code in bioql PyPI...

CVE-2025-10965

A security vulnerability has been detected in LazyAGI LazyLLM up to 0.6.1. Affected by this issue is the function lazyllmcall of the file lazyllm/components/deploy/relay/server.py. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed...

CVE-2025-10965

A security vulnerability has been detected in LazyAGI LazyLLM up to 0.6.1. Affected by this issue is the function lazyllmcall of the file lazyllm/components/deploy/relay/server.py. Such manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed...