Skip to content
OpenAdvisories

Vendor

unslothai

2 known vulnerabilities.

Products

unsloth 2 unsloth-zoo 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2026-93348

    Unsloth Zoo Code Injection via model_type in config.json

    Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the get_transformers_model_type() function in hf_utils.py collects model_type…

    unslothai unsloth unsloth-zoo