Xorbitsai vulnerabilities
Products
Newest
- xorbits inference Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration 8.3 High
- xorbitsai xoscar Xorbits Xoscar 0.11.2 Unauthenticated Deserialization RCE via Actor Pool 9.3 Critical
- xorbits inference Xinference 3.3.0 Unauthenticated Arbitrary-Path File Read via /v1/models/llm/auto-register 8.7 High
- xorbits inference Xinference through 2.11.0 Remote Code Execution via Hardcoded trust_remote_code in Model Loaders 8.7 High
- xorbits inference Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing 10.0 Critical