Vulnerabilities

Summary — last 7 days

New vulnerabilities4,980▲ 110 vs. last week
Critical / high2,114▼ 671 vs. last week
New active exploitation (KEV)9▼ 2 vs. last week
Unscored (no CVSS)780▲ 718 vs. last week
More filters
–

2 results, sorted by published date (most recent first)

CVEStatusSeverityEPSS Active exploitationAffected technologiesPublished ▼Modified Description
ReceivedLow (2.1)——R6410418 Jackrong-llm-finetuning-guideAI10/20/202610/20/2026
A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This vulnerability affects the function extract_mtp_heads of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py of the component MTP weight_map Handler. The manipulation of the argument…
ReceivedLow (2)——R6410418 Jackrong-llm-finetuning-guideAI10/20/202610/20/2026
A flaw has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd85375080c35a58397ad0d09. This affects the function validate_indexed_tensors of the file qwen-mtp-gguf/scripts/qwen_mtp_gguf_pipeline.py. Executing a manipulation of the argument weight_map can lead to path traversal. The attack may…