HIGH7.6PyPI
GHSA-527m-2xhr-j27g· CVE-2025-61784, PYSEC-2026-1573LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Modified: 7/7/2026
package
PyPI/llamafactory
pkg:pypi/llamafactory
MEDIUM6.1PyPI
GHSA-f2f7-gj54-6vpv· CVE-2025-46567, PYSEC-2026-1574LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Modified: 9/10/2026
HIGH7.5PyPI
GHSA-hj3w-wrh4-44vp· CVE-2024-52803, PYSEC-2026-1575LLama Factory Remote OS Command Injection Vulnerability
Modified: 7/7/2026
HIGH8.3PyPI
GHSA-xj56-p8mm-qmxj· CVE-2025-53002, PYSEC-2026-1576LLaMA-Factory allows Code Injection through improper vhead_file safeguards
Modified: 7/7/2026
HIGH7.6PyPI
PYSEC-2026-1573· CVE-2025-61784, GHSA-527m-2xhr-j27gLLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities
Modified: 7/7/2026
MEDIUM6.1PyPI
PYSEC-2026-1574· CVE-2025-46567, GHSA-f2f7-gj54-6vpvLLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py
Modified: 7/7/2026
HIGH7.5PyPI
PYSEC-2026-1575· CVE-2024-52803, GHSA-hj3w-wrh4-44vpLLama Factory Remote OS Command Injection Vulnerability
Modified: 7/7/2026
HIGH8.3PyPI
PYSEC-2026-1576· CVE-2025-53002, GHSA-xj56-p8mm-qmxjLLaMA-Factory allows Code Injection through improper vhead_file safeguards
Modified: 7/7/2026