AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

LlamaFactory security advisories

4 advisories · none critical or high in 12 months · latest Oct 7, 2025

Repository

4 advisories

High 7.6Oct 7, 2025LLaMA Factory's Chat API Contains Critical SSRF and LFI VulnerabilitiesCVE-2025-61784fixed in 0.9.4High 8.3Jun 27, 2025LLaMA-Factory allows Code Injection through improper vhead_file safeguardsCVE-2025-53002no fix yetMedium 6.1Apr 23, 2025LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.pyCVE-2025-46567fixed in 0.9.3High 7.5Nov 21, 2024LLama Factory Remote OS Command Injection VulnerabilityCVE-2024-52803fixed in 0.9.1
About LlamaFactory

Unified Efficient Fine-Tuning of 100+ LLMs & VLMs (ACL 2024)

Packages watched: llamafactory (PyPI).

hiyouga/LlamaFactoryOn Repos