{"data":{"ecosystem":"pypi","name":"flash-attn","url":"https://aisecwatch.com/packages/pypi/flash-attn","latestVersion":"2.8.3.post1","firstReleaseAt":"2022-11-15T22:16:17.679Z","repository":"https://github.com/Dao-AILab/flash-attention","llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"einops","versionSpec":null,"scope":"runtime"},{"ecosystem":"pypi","name":"torch","versionSpec":null,"scope":"runtime"}],"advisories":[{"id":"78361bda-9cc4-4c9c-8c7f-b131f2d134fc","url":"https://aisecwatch.com/issues/78361bda-9cc4-4c9c-8c7f-b131f2d134fc","cveId":"CVE-2026-31253","title":"CVE-2026-31253: The flash-attention training framework thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 (2025-13-04) contains an…","severity":"high","publishedAt":"2026-05-11T17:16:20.307Z","affected":["flash_attn@<= 2.8.3"],"epssScore":0.0037}],"checkedAt":"2026-10-09T23:09:44.017Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}