CVE-2025-50460
2 advisories.
PyPI/ms-swift CVE-2025-50460: critical 9.8, EPSS 2.69%
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.6.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-fm6c-f59h-7mmg
- https://github.com/modelscope/ms-swift/security/advisories/GHSA-fm6c-f59h-7mmg
- https://nvd.nist.gov/vuln/detail/CVE-2025-50460
- https://github.com/modelscope/ms-swift/pull/5174
- https://github.com/modelscope/ms-swift/commit/b3418ed9b050dc079553c275c5ed14cfb2b66cf7
- https://github.com/Anchor0221/CVE-2025-50460
- https://github.com/advisories/GHSA-6757-jp84-gxfx
- https://github.com/modelscope/ms-swift
- https://github.com/modelscope/ms-swift/blob/main/tests/run.py#L420
CVE-2025-50460 · published · modified · JSON
PyPI/ms-swift CVE-2025-50460: critical 9.8, EPSS 2.69%
MS SWIFT Remote Code Execution via unsafe PyYAML deserialization
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.6.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1683
- https://github.com/modelscope/ms-swift/security/advisories/GHSA-fm6c-f59h-7mmg
- https://nvd.nist.gov/vuln/detail/CVE-2025-50460
- https://github.com/modelscope/ms-swift/pull/5174
- https://github.com/modelscope/ms-swift/commit/b3418ed9b050dc079553c275c5ed14cfb2b66cf7
- https://github.com/Anchor0221/CVE-2025-50460
- https://github.com/advisories/GHSA-6757-jp84-gxfx
- https://github.com/modelscope/ms-swift
- https://github.com/modelscope/ms-swift/blob/main/tests/run.py#L420
- https://pypi.org/project/ms-swift
- https://github.com/advisories/GHSA-fm6c-f59h-7mmg
CVE-2025-50460 · published · modified · JSON