Skip to content
OpenAdvisories

Package · PyPI

mamba-ssm

1 known vulnerabilities.

1 result · Feed

  • Critical 9.8

    mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub

    The mamba language model framework thru 2.2.6 is vulnerable to insecure deserialization (CWE-502) when loading pre-trained models from HuggingFace Hub. The MambaLMHeadModel.from_pretrained() method uses torch.load() to load the pytorch_model.bin weight file w…