Login Request a demo
HY
Product
hydra
by hydra-ecosystem · last CVE Oct 6, 2026
4
CVEs
0
On KEV
8.5
Max CVSS
4
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 4Medium 0Low 0
Severity
All severities4Critical0High4Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add hydra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-106439
8.5
0%
Oct 6
Hydra: Mutable instantiate policy sets allow target blocklist bypass
Affected: >= 1.3.4, < 1.3.7; >= 1.4.0.dev4, < 1.4.0.dev10
CVE-2026-106442
7.8
0%
Oct 6
Hydra instantiate target blacklist bypasses permit code execution
Affected: >= 1.3.4, < 1.3.6; >= 1.4.0.dev0, < 1.4.0.dev9
CVE-2026-106441
7.8
0%
Oct 6
Hydra logging configuration permits unsafe callable resolution
Affected: < 1.3.6; >= 1.4.0.dev0, < 1.4.0.dev9
CVE-2026-106440
7.8
0%
Oct 6
Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method
Affected: >= 1.2.0, < 1.3.0; >= 1.4.0.dev4, < 1.4.0.dev10
Showing 4