lightgbm vulnerabilities
CVEs whose affected-version data names the lightgbm package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-92786High· 7.8LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction
LightGBM through 4.7.0 fails to validate child and split array values when parsing text models, allowing attackers to write out-of-bounds memory during SHAP prediction. Attackers can craft malicious model files with invalid node referenc…
▾ Twilightlightgbm-org · LightGBMEPSS 0.19%via NVD
CVE-2024-43598High· 8.1LightGBM Remote Code Execution Vulnerability
LightGBM Remote Code Execution Vulnerability
▾ Twilightmicrosoft · lightgbmEPSS 1.4%via NVD