2 known vulnerabilities, worst severity MODERATE.
6 direct dependencies
none carry a known advisory
26 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| HadrianSecurity/subwiz | MEDIUMnot pinned |
| JackKozmo29/mailguard-jev-style-1.5b | MEDIUMnot pinned |
28 published models
2 declared · 26 observed · 2 inferred
| Model | Evidence |
|---|---|
| autotrust/GEV-26B-Decide | observed |
| autotrust/GEV-26B-Decide-NVFP4 | observed |
28 published AI models are associated with this package: 2 name it in a requirements or pyproject file, 26 load it or import it directly, and 2 are inferred from the runtime stack their declared library pulls in. Only 2 state a version requirement, so this is not a count of affected models.
CVSS v3.1 base score out of 10
chance of exploitation in 30 days, 62nd percentile of all CVEs
CyberXYZ composite out of 10
fig. 01 — GHSA-mr82-8j83-vxmv, the advisory selected below
Regular expression denial of service in Pydantic < 2.4.0, < 1.10.13 allows remote attackers to cause denial of service via a crafted email string.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Checked 2026-11-06 at 22:26 UTC. The most recent advisory here was published 2024-04-15. Updated continuously from NVD, GHSA, OSV and CNA feeds.