TI-2026-76498 CVE-2026-112304 · GHSA-rh68-f334-2256
Unsafe deserialization in docTR lets crafted checkpoints run code
Priority HIGH 69
docTR through 1.1.0 contains an unsafe deserialization vulnerability in load_pretrained_params() that loads checkpoints with torch.load without weights_only=True.