Vulnerability	Vulnerable Version
C Deserialization of Untrusted Data tensorrt-llm is a TensorRT-LLM: A TensorRT Toolbox for Large Language Models Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the `ZeroMqQueue` class in `executor.py`. An attacker can execute code, disclose information, and tamper with data by gaining local access to the TRTLLM server. How to fix Deserialization of Untrusted Data? Upgrade `tensorrt-llm` to version 0.18.2 or higher.	[,0.18.2)

Deserialization of Untrusted Data

tensorrt-llm is a TensorRT-LLM: A TensorRT Toolbox for Large Language Models

Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ZeroMqQueue class in executor.py. An attacker can execute code, disclose information, and tamper with data by gaining local access to the TRTLLM server.

How to fix Deserialization of Untrusted Data?

Upgrade tensorrt-llm to version 0.18.2 or higher.

[,0.18.2)

Go back to all versions of this package