TI-2026-76237 CVE-2026-112075 · GHSA-fmj9-5fq7-mvjg
unslothai unsloth unsafe reflection via externally-controlled input
Priority MEDIUM 63
A weakness has been identified in unslothai unsloth up to 0.1.501-beta.
unslothai
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
unslothai records in CISA KEVNo unslothai vulnerabilities are listed in CISA KEV.
Records
2 records
TI-2026-62938 CVE-2026-93348 · GHSA-6crx-pj66-wf6h
Unsloth Zoo Code Injection via model_type in config.json
Priority LOW 39
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the get_transformers_model_type() func…