CRITICAL9.1PyPI
PYSEC-2025-138· CVE-2025-62608, GHSA-w6vg-jg77-2qg6Modified: 5/20/2026
package
PyPI/mlx
pkg:pypi/mlx
HIGH7.5PyPI
PYSEC-2025-139· CVE-2025-62609, GHSA-j842-xgm4-wf88Modified: 5/20/2026
MEDIUMPyPI
GHSA-j842-xgm4-wf88· CVE-2025-62609, PYSEC-2025-139MLX has Wild Pointer Dereference in load_gguf()
Modified: 6/6/2026
MEDIUMPyPI
GHSA-w6vg-jg77-2qg6· CVE-2025-62608, PYSEC-2025-138MLX has heap-buffer-overflow in load()
Modified: 6/6/2026