Skip to content
OpenAdvisories

Package · PyPI

hydra-optuna-sweeper

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-106440

    Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method

    Hydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts a configuration-controlled dotted path in hydra.sweeper.custom_search_space, resolves it with hydra.utils.get…

    hydra-ecosystem hydra hydra-optuna-sweeper PyPI