lmdeploy vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

GHSA-39WR-7Q6H-CF68Highlmdeploy: LMDeploy has an SSRF bypass CVE-2026-33625Highlmdeploy: LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading CVE-2025-66455Criticallmdeploy: LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py CVE-2025-59953Criticallmdeploy: LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy CVE-2026-46517Highlmdeploy: lmdeploy: Hardcoded trust_remote_code=True is an implicit unsafe remote-code load path with no user opt-out CVE-2026-46432Highlmdeploy: LMDeploy: Arbitrary code execution via hardcoded trust_remote_code=True in lmdeploy model initialization CVE-2026-33626Highlmdeploy: LMDeploy has Server-Side Request Forgery (SSRF) via Vision-Language Image Loading CVE-2025-67729Highlmdeploy: lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()CVE-2025-3163Mediumlmdeploy: InternLM LMDeploy code injection vulnerability CVE-2025-3162Mediumlmdeploy: LMDeploy Improper Input Validation Vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo