LLaMA-Factory allows Code Injection through improper vhead_file safeguards
High severity
GitHub Reviewed
Published
Jun 26, 2025
in
hiyouga/LLaMA-Factory
•
Updated Jun 27, 2025
Give feedback on Dependabot alerts