{"data":{"ecosystem":"pypi","name":"mlx","url":"https://aisecwatch.com/packages/pypi/mlx","latestVersion":"0.32.3","firstReleaseAt":"2023-12-05T00:18:33.275Z","repository":"https://github.com/ml-explore/mlx","llm":{"exposure":"none","depth":null,"integratedAt":null,"integratedVersion":null,"sdks":[],"path":[]},"authority":{"profile":[],"fromDependencies":[]},"dependencies":[{"ecosystem":"pypi","name":"ml-dtypes","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"mlx-cpu","versionSpec":"==0.32.3","scope":"extra:cpu"},{"ecosystem":"pypi","name":"mlx-cuda-12","versionSpec":"==0.32.3","scope":"extra:cuda"},{"ecosystem":"pypi","name":"mlx-cuda-13","versionSpec":"==0.32.3","scope":"extra:cuda13"},{"ecosystem":"pypi","name":"mlx-metal","versionSpec":"==0.32.3","scope":"runtime"},{"ecosystem":"pypi","name":"numpy","versionSpec":">=2","scope":"extra:dev"},{"ecosystem":"pypi","name":"pre-commit","versionSpec":null,"scope":"extra:dev"},{"ecosystem":"pypi","name":"torch","versionSpec":">=2.9","scope":"extra:dev"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":null,"scope":"extra:dev"}],"advisories":[{"id":"90fe9566-0ab4-424f-bd56-b2e210762ea1","url":"https://aisecwatch.com/issues/90fe9566-0ab4-424f-bd56-b2e210762ea1","cveId":"CVE-2025-62609","title":"CVE-2025-62609: MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault…","headline":"MLX segmentation fault in GGUF file loading from malicious files","severity":"high","publishedAt":"2025-11-21T19:16:02.467Z","affected":["mlx@<= 0.29.3 (fixed: 0.29.4)"],"epssScore":0.00379},{"id":"f80ab43b-cddf-4bc9-84c8-215923ef2c64","url":"https://aisecwatch.com/issues/f80ab43b-cddf-4bc9-84c8-215923ef2c64","cveId":"CVE-2025-62608","title":"CVE-2025-62608: MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a heap buffer…","headline":"MLX heap buffer overflow in load() when parsing NumPy .npy files","severity":"critical","publishedAt":"2025-11-21T19:16:02.267Z","affected":["mlx@<= 0.29.3 (fixed: 0.29.4)"],"epssScore":0.00527}],"checkedAt":"2026-10-09T22:16:27.410Z"},"meta":{"advisoryMatching":"by package name; advisory records do not state an ecosystem"}}