1 known vulnerability, worst severity MODERATE.
14 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| Infomaniak-AI/vllm-translategemma-4b-it | MEDIUMnot pinned |
| dealignai/DeepSeek-V4.1-Flash-1017-UNCENSORED-FP8 | MEDIUMnot pinned |
14 published models
2 declared · 14 observed · 0 inferred
| Model | Evidence |
|---|---|
| nvidia/NVIDIA-Nemotron-Parse-2.0 | declared |
| nvidia/NVIDIA-Nemotron-Parse-v1.1 | declared |
14 published AI models are associated with this package: 2 name it in a requirements or pyproject file, 14 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 2 state a version requirement, so this is not a count of affected models.
CVSS v3.1 base score out of 10
chance of exploitation in 30 days, 5th percentile of all CVEs
CyberXYZ composite out of 10
fig. 01 — GHSA-6w46-j5rx-g56g, the advisory selected below
pytest through 9.0.2 on UNIX relies on directories with the /tmp/pytest-of-{user} name pattern, which allows local users to cause a denial of service or possibly gain privileges.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Checked 2026-11-06 at 21:23 UTC. The most recent advisory here was published 2026-01-22. Updated continuously from NVD, GHSA, OSV and CNA feeds.