https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:07:21.550546+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-367907 EUVD-2026-367907 2026-10-06T07:07:21.607990+00:00 EUVD-2026-367907 https://cve.radiocsirt.org/vuln/fkie_cve-2026-90614 fkie_cve-2026-90614 2026-10-06T07:07:21.608027+00:00

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the component MQTT+S3 Communication Backend. This manipulation of the argument s3_key_str causes deserialization. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.

 https://cve.radiocsirt.org/vuln/ghsa-96qh-x5p5-9v7x GHSA-96qh-x5p5-9v7x 2026-10-06T07:07:21.608061+00:00

A weakness has been identified in FedML-AI FedML up to 0.9.6. Affected by this issue is the function S3Storage.read_model of the file fedml/core/distributed/communication/s3/remote_storage.py of the component MQTT+S3 Communication Backend. This manipulation of the argument s3_key_str causes deserialization. Remote exploitation of the attack is possible. The project was informed of the problem early through an issue report but has not responded yet.