mamba-ssm
1 advisory in the AI Sec Watch database names mamba-ssm (PyPI). mamba-ssm (PyPI) has declared an LLM component as a dependency since 2026-01-12.
Mamba state-space model
The first release to declare it was version 2.3.0.
Advisories
Advisories that name mamba-ssm as affected and state PyPI as its ecosystem. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-31239mamba language model framework insecure deserialization when loading models | High | <= 2.2.6 | 2026-05-12 |
Dependencies of the latest release
As declared in PyPI metadata for version 2.3.2.post1. Optional extras are listed with their extra name.
- transformersHugging Face Hub / Transformers
- apache-tvm-ffi
- causal-conv1d[causal-conv1d]
- einops
- ninja
- packaging
- pytest[dev]
- quack-kernels
- setuptools
- tilelang
- torch
- triton
Tracked packages that depend on it
Among the packages in the registry; not every dependent on PyPI.