flash-attn vulnerabilities

CVEs whose affected-version data names the flash-attn package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-31253High· 7.3

flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

flash-attention contains an insecure deserialization vulnerability in its checkpoint loading mechanism

▾ Twilightflash-attn · flash-attnEPSS 0.22%via OSV

flash-attn vulnerabilities (CVEs) · VulnSea