1 known vulnerability, worst severity HIGH.
17 published models carry an advisory from this package
0 pin a version the advisory is confirmed against; the rest declare it without a version.
| FluidInference/parakeet-ctc-110m-coreml | HIGHnot pinned |
| LilaRest/gemma-4-31B-it-NVFP4-turbo | HIGHnot pinned |
18 published models
5 declared · 13 observed · 0 inferred
| Model | Evidence |
|---|---|
| c41/deepopen-banking77-sam13-v1 | declared |
| FluidInference/parakeet-ctc-110m-coreml | declared |
18 published AI models are associated with this package: 5 name it in a requirements or pyproject file, 13 load it or import it directly, and 0 are inferred from the runtime stack their declared library pulls in. Only 2 state a version requirement, so this is not a count of affected models.
CVSS v3.1 base score out of 10
chance of exploitation in 30 days, 37th percentile of all CVEs
CyberXYZ composite out of 10
fig. 01 — GHSA-xp76-357g-9wqq, the advisory selected below
The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Checked 2026-11-06 at 19:13 UTC. The most recent advisory here was published 2022-05-05. Updated continuously from NVD, GHSA, OSV and CNA feeds.