vowpal_wabbit vulnerabilities

1 known vulnerability in vowpal_wabbit from VowpalWabbit. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.9 Critical severity

  vowpal_wabbit: Improper Neutralization of Special Elements used in an OS Command

  CVE-2026-44723May 26, 2026VowpalWabbit

  Vowpal Wabbit is a machine learning system. The workflow .github/workflows/python_checks.yml embeds ${{ github.event.pull_request.title }} directly inside double-quoted bash strings in four separate steps across four jobs, each passing it as a CLI argument to