Approved changes feed: RSS · Atom

cpe:2.3:a:exo-explore:exo:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorExo Explore (05876a1e-61e7-5f08-9f91-28758b6463b7)
ProductExo (805b9317-6ee6-591f-9209-fee7efb8ca4c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-14738 vulnerable 2026-07-29 00:26:17.516344 exo-explore exo Vision Feature Cache vision.py _image_cache_key weak hash
LOW (3.7)
A security flaw has been discovered in exo-explore exo up to 1.0.71. Affected is the function _image_cache_key of the file src/exo/worker/engines/mlx/vision.py of the component Vision Feature Cache. The manipulation results in use of weak hash. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been released to the public and may be used for attacks. The pull request to fix this issue awaits acceptance.
Published: 2026-07-05T10:15:09.187Z
Updated: 2026-07-06T13:33:34.713Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.