Skip to content
OpenAdvisories

Vendor

Dao-AILab

1 known vulnerabilities.

Products

flash-attention 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-62239

    FlashAttention Symlink Attack via tarfile.extractall in hopper/setup.py

    FlashAttention through 2.8.3.post1, fixed in commit 0816ef1, contains a symlink attack vulnerability in the download_and_copy() function within hopper/setup.py that extracts NVIDIA toolchain archives without validating symlinks or filtering tar members. A loc…

    Dao-AILab flash-attention