PyPI/gptcache CVE-2026-10812: low 3.6, EPSS 0.07%
GPTCache: File and image cache keys collide because BufferedReader.peek() only reads the buffered prefix
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.1.44 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3468
- https://nvd.nist.gov/vuln/detail/CVE-2026-10812
- https://github.com/zilliztech/GPTCache/issues/684
- https://github.com/zilliztech/GPTCache/pull/678
- https://github.com/zilliztech/GPTCache
- https://vuldb.com/cve/CVE-2026-10812
- https://vuldb.com/submit/831636
- https://vuldb.com/vuln/368260
- https://vuldb.com/vuln/368260/cti
- https://pypi.org/project/gptcache
- https://github.com/advisories/GHSA-xfqj-4cr9-9gr5
CVE-2026-10812 · published · modified · JSON