VYPR

npcpy

by NPC Worldwide

CVEs (2)

  • CVE-2026-122015MedNov 4, 2026
    risk 0.41cvss 6.3epss —

    A vulnerability was found in NPC-Worldwide npcpy up to 2.1.27. This vulnerability affects the function get_mlx_response of the file npcpy/gen/response.py of the component MLX Provider. The manipulation of the argument model results in improper input validation. The attack can be…

  • CVE-2026-122014MedNov 4, 2026
    risk 0.41cvss 6.3epss —

    A vulnerability has been found in NPC-Worldwide npcpy up to 2.1.27. This affects the function load_sft_model of the file npcpy/ft/sft.py. The manipulation of the argument base_model_name_or_path leads to code injection. The attack can be initiated remotely. The exploit has been…