pypi package report

Is safetensors safe?

As of 2026-11-14, CyberXYZ has no known vulnerabilities or malicious-package signals recorded for safetensors (pypi). That describes what is recorded, not a guarantee about future releases.

// reach

18 direct dependencies

6 carry known advisories, worst CRITICAL

126 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade
// ai models

3,329 published models

25 declared · 118 observed · 3277 inferred

ModelEvidence
doofz/THX-01declared
multimodalart/flux-lora-the-explorerdeclared
Create a free accountto see all 3,327 models and per-model risk

3329 published AI models are associated with this package: 25 name it in a requirements or pyproject file, 118 load it or import it directly, and 3277 are inferred from the runtime stack their declared library pulls in. Only 19 state a version requirement, so this is not a count of affected models.


// questions
Is safetensors safe to install?

As of 2026-11-14, CyberXYZ has no known vulnerabilities or malicious-package signals recorded for safetensors (pypi). That is a statement about the record, not a guarantee, so check the exact version you install.

Does safetensors have known vulnerabilities?

No known vulnerabilities are recorded for safetensors (pypi) as of 2026-11-14.

How do I check safetensors before installing?

Search safetensors in CyberXYZ Check at https://cyberxyz.io/check?q=safetensors. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.


Checked 2026-11-14 at 14:56 UTC. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.