Search results

Potential Remote Code Execution via torch.load in load_diamond_model

Status: Open.

#200 In NPC-Worldwide/npcpy;

· Doria77486 opened on Jan 30, 2026

Unsafe deserialization in deserialize_model leads to arbitrary code execution via pickle.loads

Status: Open.

#198 In NPC-Worldwide/npcpy;

· Doria77486 opened on Jan 15, 2026

Untrusted Jinx templates lead to Jinja2 template injection and arbitrary code execution

Status: Open.

#197 In NPC-Worldwide/npcpy;

· Doria77486 opened on Jan 15, 2026

[feat] jinx <-> npc array / compute graph interops

Status: Open.

#196 In NPC-Worldwide/npcpy;

· cagostino opened on Nov 28, 2025

[feat] auto discover models from common hosting endpoints (lm studio, llama cpp, mlx)

Status: Open.

#193 In NPC-Worldwide/npcpy;

· cagostino opened on Nov 17, 2025

Paths should use platform-specific standards.

Status: Open.

#95 In NPC-Worldwide/npcpy;

· hexmode opened on Feb 23, 2025