PyPI/lmcache: critical 9.8
Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transport
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.3.9 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-vv44-hjm2-qw2f
- https://nvd.nist.gov/vuln/detail/CVE-2026-105192
- https://github.com/LMCache/LMCache
- https://github.com/LMCache/LMCache/blob/v0.3.9/lmcache/v1/multiprocess/custom_types.py
- https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/platform/base/ipc_wrapper.py
- https://pypi.org/project/lmcache
published · modified · JSON