npcpy vulnerabilities
CVEs whose affected-version data names the npcpy package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-122015Medium· 6.3NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation
A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in im…
▾ SunlitNPC-Worldwide · npcpyEPSS 0.31%via CVEORG
CVE-2026-122014Medium· 6.3NPC-Worldwide npcpy sft.py load_sft_model code injection
A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. The manipulation of the argument base_model_name_or_path leads to code injection. The attack can be…
▾ SunlitNPC-Worldwide · npcpyEPSS 0.31%via CVEORG