ludwig vulnerabilities

CVEs whose affected-version data names the ludwig package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-104103High· 8.1

2w ago

Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models

Ludwig is a low-code framework for building custom LLMs, neural networks, and other AI models. Prior to 0.17.8, ludwig.datasets.archives.extract_archive() validated tar member names before calling TarFile.extractall() but did not validat…

▾ Twilightludwig-ai · ludwigEPSS 0.49%via NVD