megatron-bridge (>=0.3.0, <=0.3.1) potentially affected by CVE-2026-65180 via megatron-core (0.17.0rc0)

megatron-core PYPI version 0.17.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on megatron-core and may be impacted: - megatron-bridge =0.3.0, =0.3.1 Source cves: CVE-2026-65180 Source advisory: MEND:CVE-2026-65180...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2025-33248 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2025-33248 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871032...

Deserialization of Untrusted Data

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the hybrid conversion script. An attacker can execute arbitrary code, escalate privileges...

Deserialization of Untrusted Data

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the quantization configuration loading process. An attacker can execute arbitrary code,...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2025-33247 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2025-33247 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871031...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24150 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24150 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871033...

Deserialization of Untrusted Data

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the inferencing process. An attacker can execute arbitrary code, escalate privileges,...

Deserialization of Untrusted Data

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the checkpoint loading process. An attacker can execute arbitrary code, escalate...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24151 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24151 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871034...

Deserialization of Untrusted Data

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Deserialization of Untrusted Data through the checkpoint loading process. An attacker can execute arbitrary code, escalate...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24152 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24152 Source advisory: SNYK:PYTHON-MEGATRONCORE-15871035...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24152 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24152 Source advisory: MEND:CVE-2026-24152...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24151 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24151 Source advisory: MEND:CVE-2026-24151...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24150 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24150 Source advisory: MEND:CVE-2026-24150...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2025-33248 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2025-33248 Source advisory: MEND:CVE-2025-33248...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2025-33247 via megatron-core (>=0.2.0, <=0.15.2)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.1.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2025-33247 Source advisory: MEND:CVE-2025-33247...

NVIDIA Megatron Bridge code injection vulnerability

NVIDIA Megatron Bridge is a component developed by NVIDIA Corporation in the United States that connects Hugging Face and Megatron-Core. NVIDIA Megatron Bridge has a code injection vulnerability. This vulnerability arises from malicious inputs in the data merging process, which may lead to code...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24149 via megatron-core (>=0.2.0, <=0.14.0rc7)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.2.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24149 Source advisory: SNYK:PYTHON-MEGATRONCORE-15248398...

Arbitrary Code Injection

Overview megatron-core is a Megatron Core - a library for efficient and scalable training of transformer based models Affected versions of this package are vulnerable to Arbitrary Code Injection via the script process. An attacker can execute arbitrary code, escalate privileges, disclose...

collie-lm (>=1.0.5, <=1.0.7), entity-model (>=1.0.0, <=1.0.9) +21 more potentially affected by CVE-2026-24149 via megatron-core (>=0.2.0, <=0.14.0rc7)

megatron-core PYPI version =0.2.0, =1.0.5, =1.0.0, =5.1.6, =1.0.0, =0.2.0rc0, =0.1.0rc1, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.0, =2.0.8, =2.4.1 and more Source cves: CVE-2026-24149 Source advisory: MEND:CVE-2026-24149...