lazyllm-llamafactory (>=0.9.4.dev0, <=0.9.4.dev1) potentially affected by CVE-2026-49119 via gradio (5.45.0)

gradio PYPI version 5.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory =0.9.4.dev0, =0.9.4.dev1 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

lazyllm-llamafactory (0.9.3.dev0) potentially affected by CVE-2026-49119 via gradio (5.25.0)

gradio PYPI version 5.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory 0.9.3.dev0 Source cves: CVE-2026-49119 Source advisory: OSV:GHSA-J36P-7W88-G82J...

lazyllm-llamafactory (0.9.3.dev0) potentially affected by CVE-2026-10783 via gradio (5.25.0)

gradio PYPI version 5.25.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory 0.9.3.dev0 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...

lazyllm-llamafactory (>=0.9.4.dev0, <=0.9.4.dev1) potentially affected by CVE-2026-10783 via gradio (5.45.0)

gradio PYPI version 5.45.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - lazyllm-llamafactory =0.9.4.dev0, =0.9.4.dev1 Source cves: CVE-2026-10783 Source advisory: OSV:GHSA-6655-8PH2-63J3...