All products

llamafactory

PyPI · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.pyCVE-2025-46567 · GHSA-F2F7-GJ54-6VPVVersion ranges need review. llamafactory PyPI Medium Fix reported
LLaMA-Factory allows Code Injection through improper vhead_file safeguardsCVE-2025-53002 · GHSA-XJ56-P8MM-QMXJVersion ranges need review. llamafactory PyPI High No fix reported
LLama Factory Remote OS Command Injection VulnerabilityCVE-2024-52803 · GHSA-HJ3W-WRH4-44VPVersion ranges need review. llamafactory PyPI High Fix reported
LLaMA Factory's Chat API Contains Critical SSRF and LFI VulnerabilitiesCVE-2025-61784 · GHSA-527M-2XHR-J27GVersion ranges need review. llamafactory PyPI High Fix reported