Skip to content
OpenAdvisories

Package · PyPI

ms-swift

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.6
    CVE-2026-10801

    modelscope ms-swift PIL Image Cache Key base.py Template._save_pil_image weak hash

    A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to use of weak hash. An a…

    modelscope ms-swift ms-swift PyPI
  • Critical 9.8
    CVE-2025-50460 Public exploit

    MS SWIFT Remote Code Execution via unsafe PyYAML deserialization

    A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). If an attacker can control the content of the YAML configurati…

    ms-swift PyPI
  • Medium —
    GHSA-r54c-2xmf-2cf3

    MS SWIFT Deserialization RCE Vulnerability

    This appears to be a security vulnerability report describing a remote code execution (RCE) exploit in the ms-swift framework through malicious pickle deserialization in adapter model files. The vulnerability allows arbitrary command execution when loading sp…

    ms-swift PyPI
  • Medium —
    CVE-2025-41419

    MS SWIFT WEB-UI RCE Vulnerability

    **I. Detailed Description:** This includes scenarios, screenshots, vulnerability reproduction methods. For account-related vulnerabilities, please provide test accounts. If the reproduction process is complex, you may record a video, upload it to Taopan, and …

    ms-swift PyPI