CyberSecBulletin

flairNLP vulnerabilities

We track 2 vulnerabilities in flairNLP products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 24, 2026.

2vulnerabilities
0critical
2high
0exploited
7.7average CVSS score

Latest flairNLP vulnerabilities

  • 7.8 High severity

    flair: Deserialization of Untrusted Data

    CVE-2026-76843flairNLP

    The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model s

  • 7.5 High severity

    flair: Improper Control of Generation of Code

    CVE-2024-10073flairNLP

    A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible t