instructlab vulnerabilities (PyPI)

2 vulnerabilities.

• instructlab PyPI Instructlab: instructlab: arbitrary code execution due to hardcoded `trust_remote_code=true` CVE-2026-6859 8.8 HighApril 22, 2026
• instructlab PyPI Instructlab: instructlab: path traversal allows arbitrary directory creation and file write CVE-2026-6855 7.1 HighApril 22, 2026