CVE-2026-31239
2 advisories.
PyPI/mamba-ssm CVE-2026-31239: critical 9.8
mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.2.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-pq2f-x424-6fjm
- https://nvd.nist.gov/vuln/detail/CVE-2026-31239
- https://github.com/state-spaces/mamba
- https://www.notion.so/CVE-2026-31239-35d1e1393188810d9baedfbd8363f396
CVE-2026-31239 · published · modified · JSON
PyPI/mamba-ssm CVE-2026-31239: critical 9.8
mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.2.6 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-406
- https://nvd.nist.gov/vuln/detail/CVE-2026-31239
- https://github.com/state-spaces/mamba
- https://www.notion.so/CVE-2026-31239-35d1e1393188810d9baedfbd8363f396
- https://pypi.org/project/mamba-ssm
- https://github.com/advisories/GHSA-pq2f-x424-6fjm
CVE-2026-31239 · published · modified · JSON