sentencepiece vulnerabilities

CVEs whose affected-version data names the sentencepiece package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-1260High· 7.8

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.

▾ Twilightgoogle · sentencepieceEPSS 0.18%via NVD

sentencepiece vulnerabilities (CVEs) · VulnSea