1 known vulnerability, worst severity MODERATE.
0 direct dependencies
none carry a known advisory
1 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| interfaze-ai/interfaze-1-lite | MEDIUMnot pinned |
1 published models
1 declared · 1 observed · 0 inferred
| Model | Evidence |
|---|---|
| interfaze-ai/interfaze-1-lite | observed |
1 published AI models are associated with this package: 1 name it in a requirements or pyproject file, 1 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 1 state a version requirement, so this is not a count of affected models.
severity out of 10
chance of exploitation in 30 days, 34th percentile of all CVEs
CyberXYZ composite out of 10
fig. 01 — GHSA-cxqh-p2w9-fmr7, the advisory selected below
A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Checked 2026-10-16 at 00:13 UTC. The most recent advisory here was published 2026-03-19. Updated continuously from NVD, GHSA, OSV and CNA feeds.