https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T16:38:46.786084+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-84202 CVE-2026-84202 — ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading 2026-09-30T16:38:46.788431+00:00

Affected: modelscope

ModelScope uses PyYAML's unsafe yaml.Loader to parse model configuration files, allowing arbitrary code execution through Python object construction tags. Attackers can craft malicious model repositories with poisoned configuration files that execute code when loaded by users.