Skip to content
OpenAdvisories

Vendor

flairNLP

2 known vulnerabilities.

Products

flair 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-76843

    Flair 0.15.0 and 0.15.1 Deserialization of Untrusted Data via ClusteringModel.load

    The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model …

    flairNLP flair