ms-swift
PyPI3 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting ms-swiftpage 1 of 1
- CVE-2025-41419MEDIUMEG not assessedfixed in 3.7.02025-07-31
vulnerable: 1.0.0 ... 3.6.4 (85 versions)
MS SWIFT WEB-UI RCE Vulnerability **I. Detailed Description:** This includes scenarios, screenshots, vulnerability reproduction methods. For account-related vulnerabilities, please provide test accounts. If the reproduction process is c…
- CVE-2025-50460CRITICALCVSS 9.8EG 9.82025-08-01
vulnerable: 1.0.0 ... 3.6.3 (84 versions)
A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). If an attacker can control the content of …
- CVE-2026-10801LOWCVSS 3.6EG 3.62026-06-04
vulnerable: 1.0.0 ... 4.2.0 (122 versions)
A security vulnerability has been detected in modelscope ms-swift up to 4.2.0. This affects the function Template._save_pil_image of the file swift/template/base.py of the component PIL Image Cache Key Handler. The manipulation leads to us…
Check whether ms-swift is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for ms-swift CVEs against the assets you own.
Book a Demo →