unsloth vulnerabilities
CVEs whose affected-version data names the unsloth package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-112075Medium· 6.3PoCunslothai unsloth sentence_transformer.py externally-controlled input to select classes or code
A weakness has been identified in unslothai unsloth up to 0.1.501-beta. This affects the function FastSentenceTransformer._is_transformer_module_ref of the file unsloth/models/sentence_transformer.py. This manipulation of the argument Ty…
▾ Twilightunslothai · unslothEPSS 0.33%via CVEORG
CVE-2026-93348High· 8.1Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the get_transformers_model_type() function in hf_utils.…
Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9.9 through 2026.8.19, contains a code injection vulnerability in the model-loading compile path where the get_transformers_model_type() function in hf_utils.…
▾ Twilightunslothai · unsloth-zooEPSS 0.41%via NVD