pypi package report

Is mamba-ssm safe?

mamba-ssm (pypi) has 1 known vulnerability, the worst rated CRITICAL. No malicious-package signal is recorded.

// reach

11 direct dependencies

3 carry known advisories, worst CRITICAL

7 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade

// ai models

21 published models carry an advisory from this package

0 pin a version the advisory is confirmed against; the rest declare it without a version.

kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16	CRITICALnot pinned
kuleshov-group/caduceus-ps_seqlen-131k_d_model-256_n_layer-16	CRITICALnot pinned
nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-BF16	1 advisories
nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-Base-BF16	1 advisories
nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-FP8	1 advisories
nvidia/NVIDIA-Nemotron-3-Nano-30B-A3B-NVFP4	1 advisories

21 published models

0 declared · 21 observed · 0 inferred

Model	Evidence
kuleshov-group/caduceus-ph_seqlen-131k_d_model-256_n_layer-16	observed
kuleshov-group/caduceus-ps_seqlen-131k_d_model-256_n_layer-16	observed
nvidia/Nemotron-3-Labs-Ultra-Math-RL	observed
nvidia/Nemotron-3-Nano-Omni-30B-A3B-Reasoning-FP8	observed
nvidia/Nemotron-3-Nano-Omni-30B-A3B-Reasoning-NVFP4	observed
nvidia/NVIDIA-Nemotron-3.5-Bolt-74B-A9B-24GB	observed

Create a free accountto see all 19 models and per-model risk

21 published AI models are associated with this package: 0 name it in a requirements or pyproject file, 21 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 0 state a version requirement, so this is not a count of affected models.

cvss

9.8

critical

CVSS v3.1 base score out of 10

epss

0.41%

medium

chance of exploitation in 30 days, 36th percentile of all CVEs

xyz score

4.5

medium

CyberXYZ composite out of 10

fig. 01 — GHSA-pq2f-x424-6fjm, the advisory selected below

// 1 advisories

GHSA-pq2f-x424-6fjm

CRITICALGitHub ratingCVE-2026-31239

The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub.

Full advisory text at GitHub advisory or NVD.

// cvss v3.1 vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector: Network
Attack complexity: Low
Privileges required: None
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

// questions

Is mamba-ssm safe to install?

CyberXYZ does not call a package safe in absolute terms. It records 1 known vulnerability for mamba-ssm (pypi), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.

Does mamba-ssm have known vulnerabilities?

Yes. CyberXYZ records 1 known vulnerability for mamba-ssm (pypi), the worst rated CRITICAL. They are GHSA-pq2f-x424-6fjm.

How do I check mamba-ssm before installing?

Search mamba-ssm in CyberXYZ Check at https://cyberxyz.io/check?q=mamba-ssm. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.

Checked 2026-11-14 at 13:33 UTC. The most recent advisory here was published 2026-05-12. Updated continuously from NVD, GHSA, OSV and CNA feeds.