Skip to content
OpenAdvisories

Package · PyPI

flash-attn

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.3
    CVE-2026-31253

    flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

    The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an insecure deserialization vulnerability (CWE-502) in its checkpoint loading mechanism. The load_checkpoint() function in checkpoint.py and the …

    flash-attn PyPI