HIGH7.3PyPI
GHSA-7g5w-pq96-8c5w· CVE-2026-31253, PYSEC-2026-2477flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
Modified: 7/14/2026
package
PyPI/flash-attn
pkg:pypi/flash-attn
HIGH7.3PyPI
PYSEC-2026-2477· CVE-2026-31253, GHSA-7g5w-pq96-8c5wflash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism
Modified: 7/13/2026