1 known vulnerability, worst severity CRITICAL.
7 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| davebulaval/MeaningBERT | CRITICALnot pinned |
| doofz/THX-01 | CRITICALnot pinned |
8 published models
2 declared · 6 observed · 2 inferred
| Model | Evidence |
|---|---|
| davebulaval/MeaningBERT | inferred |
| doofz/THX-01 | observed |
8 published AI models are associated with this package: 2 name it in a requirements or pyproject file, 6 load it or import it directly, and 2 are inferred from the runtime stack their declared library pulls in. Only 2 state a version requirement, so this is not a count of affected models.
CVSS v3.1 base score out of 10
chance of exploitation in 30 days, 82nd percentile of all CVEs
CyberXYZ composite out of 10
fig. 01 — GHSA-h8pj-cxx2-jfg2, the advisory selected below
Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in httpx.URL, httpx.Client and some functions using httpx.URL.copy_with.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Checked 2026-11-06 at 21:35 UTC. The most recent advisory here was published 2022-04-29. Updated continuously from NVD, GHSA, OSV and CNA feeds.