CVEs published by huntr.dev

CVEs published by huntr.dev (CVE Numbering Authority). 7 tracked.

CVE-2026-9335 MEDIUM 6.5 A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disclosure due
CVE-2026-9856 HIGH 7.1 A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file
CVE-2026-12259 MEDIUM 6.5 DOWNGRADE In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package
CVE-2026-12261 MEDIUM 6.5 UPGRADE A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and mode
CVE-2026-10595 HIGH 7.5 A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all rout
CVE-2026-12372 LOW 3.7 DOWNGRADE A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop
CVE-2026-12570 MEDIUM 5.5 A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loadin