AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Packages

Xinference security advisories

2 advisories · 1 critical or high in 12 months · latest Aug 21

Repository

2 advisories

Critical 10.0Aug 21Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsingCVE-2026-61539fixed in 2.7.0UnscoredApr 22Malicious code in xinference (PyPI)MAL-2026-3000no fix yet
About Xinference

Serve open models behind one API.

Packages watched: xinference (PyPI).

xorbitsai/inference