{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0.3.9"}],"component":"lmcache","cve_ids":[],"ecosystem":"PyPI","exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-vv44-hjm2-qw2f","id":"tcs_01M5JHHWRHTS8E3VEHWQNKCFPH","modified_at":"2026-10-16T20:15:03.736041644Z","published_at":"2026-10-07T12:31:58Z","references":["https://osv.dev/vulnerability/GHSA-vv44-hjm2-qw2f","https://nvd.nist.gov/vuln/detail/CVE-2026-105192","https://github.com/LMCache/LMCache","https://github.com/LMCache/LMCache/blob/v0.3.9/lmcache/v1/multiprocess/custom_types.py","https://github.com/LMCache/LMCache/blob/v0.5.5/lmcache/v1/platform/base/ipc_wrapper.py","https://pypi.org/project/lmcache"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-vv44-hjm2-qw2f","url":"https://osv.dev/vulnerability/GHSA-vv44-hjm2-qw2f"}],"summary":"Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transport"}