127 published AI models are associated with this package: 2 name it in a requirements or pyproject file, 125 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 1 state a version requirement, so this is not a count of affected models.
cvss
0.0
high
severity out of 10
epss
0.00%
low
chance of exploitation in 30 days, 30th percentile of all CVEs
xyz score
0.0
medium
CyberXYZ composite out of 10
fig. 01 — GHSA-7g5w-pq96-8c5w, the advisory selected below
The flash-attention training framework thru commit e724e2588cbe (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpoint loading mechanism. The loadcheckpoint() function in checkpoint.py and the checkpoint loading code in eval.py use torch.load() without enabling the security-restrictive weightsonly=True parameter. This allows the deserialization of arbitrary Python objects via the pickle module. An attacker can exploit this by providing a maliciously crafted checkpoint file. When a victim loads this checkpoint during model warmstarting or evaluation, arbitrary code is executed on the victim's system.
// cvss v3.1 vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Checked 2026-10-23 at 18:51 UTC. The most recent advisory here was published 2026-05-11. Updated continuously from NVD, GHSA, OSV and CNA feeds.