pypi

lmdeploy

16 Total advisories

16 Vulnerabilities

0 Malware

Dependency scanning

Check whether lmdeploy is in your codebase

Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.

lmdeploy

Vulnerabilities

LMDeploy has an SSRF bypass

LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out

LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization

LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization

lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out

LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading

LMDeploy Improper Input Validation Vulnerability

lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

InternLM LMDeploy code injection vulnerability

InternLM LMDeploy code injection vulnerability

lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

LMDeploy Improper Input Validation Vulnerability

Browse more PyPI advisories

Start Securing