CVE-2026-47487: Improper Limitation of a Pathname to a Restricted Directory

NVIDIA Triton Inference Server for Linux contains a vulnerability where a user could cause files outside the model repository to be read, written to, or modified by providing a path in the model name to the Triton MLflow plugin. A successful exploit of this vulnerability might lead to denial of...

deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.21.2)

transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...

GHSA-XJ96-63GP-2GMR vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-55380 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-59205 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-45HQ-CXWH-F6VC vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-6R8X-57C9-28J4 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-PHJ9-MV4W-65PM vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-VJC4-5QP5-M44J vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-55379 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-59197 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-59198 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-59200 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-3RP5-JJMW-4WV2 vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-62P4-GMF7-7G93 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

GHSA-6P8H-3WGX-97GF vulnerabilities

Vulnerabilities for packages: mlflow...

GHSA-9HW9-CH79-4VH6 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-54060 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-55798 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...

CVE-2026-59199 vulnerabilities

Vulnerabilities for packages: superset, open-webui, mlflow...