CRITICAL9.8PyPI
GHSA-wcr3-gm9f-f87q· CVE-2026-31237, PYSEC-2026-404Ludwig framework is vulnerable to insecure deserialization through its predict() method.
Modified: 6/29/2026
package
PyPI/ludwig
pkg:pypi/ludwig
CRITICAL9.8PyPI
GHSA-xp5q-5q7g-q26r· CVE-2026-31238, PYSEC-2026-405Ludwig framework is vulnerable to insecure deserialization in its model serving component
Modified: 6/29/2026
CRITICAL9.8PyPI
PYSEC-2026-404· CVE-2026-31237, GHSA-wcr3-gm9f-f87qLudwig framework is vulnerable to insecure deserialization through its predict() method.
Modified: 7/1/2026
CRITICAL9.8PyPI
PYSEC-2026-405· CVE-2026-31238, GHSA-xp5q-5q7g-q26rLudwig framework is vulnerable to insecure deserialization in its model serving component
Modified: 7/1/2026