PyPI/ms-swift CVE-2026-10801: low 3.6, EPSS 0.07%
ms-swift: Image Cache Hash Collision via Missing Dimension Metadata
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 4.2.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-3488
- https://nvd.nist.gov/vuln/detail/CVE-2026-10801
- https://github.com/modelscope/ms-swift/issues/9360
- https://github.com/modelscope/ms-swift/pull/9359
- https://github.com/modelscope/ms-swift/commit/27426a6431759a82e2a1c98344b425f90be17e07
- https://github.com/modelscope/ms-swift
- https://vuldb.com/cve/CVE-2026-10801
- https://vuldb.com/submit/831455
- https://vuldb.com/submit/831456
- https://vuldb.com/vuln/368250
- https://vuldb.com/vuln/368250/cti
- https://pypi.org/project/ms-swift
- https://github.com/advisories/GHSA-prfw-69r3-wqxf
CVE-2026-10801 · published · modified · JSON