flair vulnerabilities

2 known vulnerabilities in flair from flairNLP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  flair: Deserialization of Untrusted Data

  CVE-2026-76843Aug 24, 2026flairNLP

  The official Flair wheels for 0.15.0 and 0.15.1 still contain flair/models/clustering.py, whose ClusteringModel.load static method returns pickle.loads(joblib.load(str(model_file))) and so executes arbitrary Python while loading a model file. Loading a model s

• 7.5 High severity

  flair: Improper Control of Generation of Code

  CVE-2024-10073Oct 17, 2024flairNLP

  A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible t