I.
Full advisory text at GitHub advisory or NVD.
pypi package report
Is ms-swift safe?
ms-swift (pypi) has 4 known vulnerabilities, the worst rated MODERATE. No single fixed version is recorded that clears every advisory, so check each one below. No malicious-package signal is recorded.
// reach
0 packages depend on it
an advisory here reaches each of them
Create a free accountfor every dependency path, dependent and what to upgrade
// ai models
4 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| tencent/Hy3 | MEDIUMnot pinned |
| tencent/Hy3-FP8 | MEDIUMnot pinned |
4 published models
0 declared · 4 observed · 0 inferred
| Model | Evidence |
|---|---|
| tencent/Hy3 | observed |
| tencent/Hy3-FP8 | observed |
Create a free accountto see all 2 models and per-model risk
4 published AI models are associated with this package: 0 name it in a requirements or pyproject file, 4 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 0 state a version requirement, so this is not a count of affected models.
cvss
5.0
medium
severity band, no base score published
epss
1.2%
medium
chance of exploitation in 30 days, 79th percentile of all CVEs
xyz score
not scored
CyberXYZ composite out of 10
fig. 01 — GHSA-7c78-rm87-5673, the advisory selected below
// 4 advisories
Is ms-swift safe to install?
CyberXYZ does not call a package safe in absolute terms. It records 4 known vulnerabilities for ms-swift (pypi), the worst rated MODERATE, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does ms-swift have known vulnerabilities?
Yes. CyberXYZ records 4 known vulnerabilities for ms-swift (pypi), the worst rated MODERATE. They are GHSA-7c78-rm87-5673, GHSA-r54c-2xmf-2cf3, GHSA-prfw-69r3-wqxf, GHSA-fm6c-f59h-7mmg.
How do I check ms-swift before installing?
Search ms-swift in CyberXYZ Check at https://cyberxyz.io/check?q=ms-swift. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 09:48 UTC. The most recent advisory here was published 2026-06-04. Updated continuously from NVD, GHSA, OSV and CNA feeds.