Nixpkgs Security Tracker

Untriaged

Permalink CVE-2026-1260

created 2 months ago

Invalid Memory Access in Sentencepiece,

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure.

References

https://github.com/google/sentencepiece/releases/tag/v0.2.1

Affected products

Sentencepiece

==All versions prior to 0.2.1

Matching in nixpkgs

pkgs.sentencepiece

Unsupervised text tokenizer for Neural Network-based text generation

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1

pkgs.python312Packages.sentencepiece

Unsupervised text tokenizer for Neural Network-based text generation

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1

pkgs.python313Packages.sentencepiece

Unsupervised text tokenizer for Neural Network-based text generation

nixos-unstable 0.2.1
- nixpkgs-unstable 0.2.1
- nixos-unstable-small 0.2.1

Package maintainers

@pashashocky Pash Shocky <pashashocky@gmail.com>

Suggestions search

References

Affected products

Matching in nixpkgs

pkgs.sentencepiece

pkgs.python312Packages.sentencepiece

pkgs.python313Packages.sentencepiece

Package maintainers