Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-cb8d-gsaw-nuca
SummaryMLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer overflow in mlx::core::load() when parsing malicious NumPy .npy files. Attacker-controlled file causes 13-byte out-of-bounds read, leading to crash or information disclosure. This issue has been patched in version 0.29.4.
Aliases
0
alias CVE-2025-62608
1
alias GHSA-w6vg-jg77-2qg6
2
alias PYSEC-2025-138
Fixed_packages
0
url pkg:pypi/mlx@0.29.4
purl pkg:pypi/mlx@0.29.4
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.29.4
Affected_packages
0
url pkg:pypi/mlx@0.0.2
purl pkg:pypi/mlx@0.0.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.2
1
url pkg:pypi/mlx@0.0.3
purl pkg:pypi/mlx@0.0.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.3
2
url pkg:pypi/mlx@0.0.4
purl pkg:pypi/mlx@0.0.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.4
3
url pkg:pypi/mlx@0.0.5
purl pkg:pypi/mlx@0.0.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.5
4
url pkg:pypi/mlx@0.0.6
purl pkg:pypi/mlx@0.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.6
5
url pkg:pypi/mlx@0.0.7
purl pkg:pypi/mlx@0.0.7
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.7
6
url pkg:pypi/mlx@0.0.9
purl pkg:pypi/mlx@0.0.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.9
7
url pkg:pypi/mlx@0.0.10
purl pkg:pypi/mlx@0.0.10
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.10
8
url pkg:pypi/mlx@0.0.11
purl pkg:pypi/mlx@0.0.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.0.11
9
url pkg:pypi/mlx@0.1.0
purl pkg:pypi/mlx@0.1.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.1.0
10
url pkg:pypi/mlx@0.2.0
purl pkg:pypi/mlx@0.2.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.2.0
11
url pkg:pypi/mlx@0.3.0
purl pkg:pypi/mlx@0.3.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.3.0
12
url pkg:pypi/mlx@0.4.0
purl pkg:pypi/mlx@0.4.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.4.0
13
url pkg:pypi/mlx@0.5.1
purl pkg:pypi/mlx@0.5.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.5.1
14
url pkg:pypi/mlx@0.6.0
purl pkg:pypi/mlx@0.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.6.0
15
url pkg:pypi/mlx@0.7.0
purl pkg:pypi/mlx@0.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.7.0
16
url pkg:pypi/mlx@0.8.1
purl pkg:pypi/mlx@0.8.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.8.1
17
url pkg:pypi/mlx@0.9.1
purl pkg:pypi/mlx@0.9.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.9.1
18
url pkg:pypi/mlx@0.10.0
purl pkg:pypi/mlx@0.10.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.10.0
19
url pkg:pypi/mlx@0.11.1
purl pkg:pypi/mlx@0.11.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.11.1
20
url pkg:pypi/mlx@0.12.2
purl pkg:pypi/mlx@0.12.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.12.2
21
url pkg:pypi/mlx@0.13.0
purl pkg:pypi/mlx@0.13.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.13.0
22
url pkg:pypi/mlx@0.13.1
purl pkg:pypi/mlx@0.13.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.13.1
23
url pkg:pypi/mlx@0.14.1
purl pkg:pypi/mlx@0.14.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.14.1
24
url pkg:pypi/mlx@0.15.2
purl pkg:pypi/mlx@0.15.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.15.2
25
url pkg:pypi/mlx@0.16.3
purl pkg:pypi/mlx@0.16.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.16.3
26
url pkg:pypi/mlx@0.17.3
purl pkg:pypi/mlx@0.17.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.17.3
27
url pkg:pypi/mlx@0.18.1
purl pkg:pypi/mlx@0.18.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.18.1
28
url pkg:pypi/mlx@0.19.3
purl pkg:pypi/mlx@0.19.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.19.3
29
url pkg:pypi/mlx@0.20.0
purl pkg:pypi/mlx@0.20.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.20.0
30
url pkg:pypi/mlx@0.21.1
purl pkg:pypi/mlx@0.21.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.21.1
31
url pkg:pypi/mlx@0.22.1
purl pkg:pypi/mlx@0.22.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.22.1
32
url pkg:pypi/mlx@0.23.2
purl pkg:pypi/mlx@0.23.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.23.2
33
url pkg:pypi/mlx@0.24.2
purl pkg:pypi/mlx@0.24.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.24.2
34
url pkg:pypi/mlx@0.25.2
purl pkg:pypi/mlx@0.25.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.25.2
35
url pkg:pypi/mlx@0.26.1
purl pkg:pypi/mlx@0.26.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.26.1
36
url pkg:pypi/mlx@0.26.2
purl pkg:pypi/mlx@0.26.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.26.2
37
url pkg:pypi/mlx@0.26.3
purl pkg:pypi/mlx@0.26.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.26.3
38
url pkg:pypi/mlx@0.26.5
purl pkg:pypi/mlx@0.26.5
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.26.5
39
url pkg:pypi/mlx@0.27.1
purl pkg:pypi/mlx@0.27.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.27.1
40
url pkg:pypi/mlx@0.28.0
purl pkg:pypi/mlx@0.28.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.28.0
41
url pkg:pypi/mlx@0.29.0
purl pkg:pypi/mlx@0.29.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.29.0
42
url pkg:pypi/mlx@0.29.1
purl pkg:pypi/mlx@0.29.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.29.1
43
url pkg:pypi/mlx@0.29.2
purl pkg:pypi/mlx@0.29.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.29.2
44
url pkg:pypi/mlx@0.29.3
purl pkg:pypi/mlx@0.29.3
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-cb8d-gsaw-nuca
1
vulnerability VCID-vs6q-sx1s-wbf6
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/mlx@0.29.3
References
0
reference_url https://github.com/ml-explore/mlx
reference_id
reference_type
scores
url https://github.com/ml-explore/mlx
1
reference_url https://github.com/ml-explore/mlx/pull/1
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://github.com/ml-explore/mlx/pull/1
2
reference_url https://github.com/ml-explore/mlx/pull/2
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://github.com/ml-explore/mlx/pull/2
3
reference_url https://github.com/ml-explore/mlx/security/advisories/GHSA-w6vg-jg77-2qg6
reference_id
reference_type
scores
0
value 9.1
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
url https://github.com/ml-explore/mlx/security/advisories/GHSA-w6vg-jg77-2qg6
4
reference_url https://nvd.nist.gov/vuln/detail/CVE-2025-62608
reference_id CVE-2025-62608
reference_type
scores
url https://nvd.nist.gov/vuln/detail/CVE-2025-62608
5
reference_url https://github.com/advisories/GHSA-w6vg-jg77-2qg6
reference_id GHSA-w6vg-jg77-2qg6
reference_type
scores
url https://github.com/advisories/GHSA-w6vg-jg77-2qg6
Weaknesses
0
cwe_id 122
name Heap-based Buffer Overflow
description A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().
1
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
2
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
Exploits
Severity_range_score9.1 - 9.1
Exploitabilitynull
Weighted_severitynull
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-cb8d-gsaw-nuca