Skip to content
OpenAdvisories

Product · NPC-Worldwide

npcpy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-122015

    NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation

    A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validatio…

    NPC-Worldwide npcpy
  • Medium 6.3
    CVE-2026-122014

    NPC-Worldwide npcpy sft.py load_sft_model code injection

    A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. The manipulation of the argument base_model_name_or_path leads to code injection. The attack can be initiated remotely. T…

    NPC-Worldwide npcpy