CVE-2026-23654

High · 8.8

CVSS

8.8

EPSS

0.9%

Published

Mar 10, 2026

CISA due date

—

The record

Dependency on vulnerable third-party component in GitHub Repo: zero-shot-scfoundation allows an unauthorized attacker to execute code over a network.

Ecosystem	Package	Introduced	Fixed