Skip to content
OpenAdvisories

Vendor

tensorchord

1 known vulnerabilities.

Products

envd 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2026-128079

    envd: Host file disclosure through requirements path traversal and TOCTOU

    envd provides reproducible development environments for humans and agents. In versions starting with 0.3.38 and before 1.3.6, insufficient containment of host-side requirements-file reads in  install.python_packages(requirements=...)  could allow access to fi…

    tensorchord envd envd PyPI