VowpalWabbit vulnerabilities
We track 1 vulnerability in VowpalWabbit products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 26, 2026.
1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score
Latest VowpalWabbit vulnerabilities
- 9.9 Critical severity
vowpal_wabbit: Improper Neutralization of Special Elements used in an OS Command
Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash strings in four separate steps across four jobs, each passing it as a CLI argument to