[ Vendor · 4 CVEs ]
hydra-ecosystem
CVEs affecting hydra-ecosystem published in the last 30 days, plus any hydra-ecosystem CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-106441 | 6 Oct 2026 | CVSS 7.8 | Hydra logging configuration permits unsafe callable resolutionHydra is a framework for elegantly configuring complex applications. Prior to 1.3.6 and 1.4.0.dev9, Hydra passes Python logging configuration to… | Fix |
| CVE-2026-106442 | 6 Oct 2026 | CVSS 7.8 | Hydra instantiate target blacklist bypasses permit code executionHydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.6 and 1.4.0.dev9, the instantiate() target blacklist… | Fix |
| CVE-2026-106439 | 6 Oct 2026 | CVSS 8.5 | Hydra: Mutable instantiate policy sets allow target blocklist bypassHydra is a framework for elegantly configuring complex applications. From 1.3.4 until 1.3.7 and 1.4.0.dev10, Hydra stores legacy instantiate target… | Fix |
| CVE-2026-106440 | 6 Oct 2026 | CVSS 7.8 | Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_methodHydra is a framework for elegantly configuring complex applications. From 1.2.0 until 1.3.0 and 1.4.0.dev10, the hydra-optuna-sweeper package accepts… | Fix |