llama-factory vulnerabilities

CVEs whose affected-version data names the llama-factory package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-61784High· 7.6

1y ago

LLaMA-Factory is a tuning library for large language models

LLaMA-Factory is a tuning library for large language models. Prior to version 0.9.4, a Server-Side Request Forgery (SSRF) vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to …

▾ Twilighthiyouga · llama-factoryEPSS 0.38%via NVD