- Latest release
- 1.6.0 (Mar 23, 2026): no advisory affects it
- Newest unaffected release
- 1.6.0 (Mar 23, 2026), the latest release
- Advisories
- 1 · 1 medium
- Weekly downloads
- 74
- Dependents
- 1
- Releases
- 16 since 0.0.0 (Jun 26, 2025)
- Registry
- PyPI
- Releases read
- Nov 8, 2026
Version timeline
- CVE-2026-2256Affects 0.0.0 to 1.6.0rc1 (1.6.0 is outside it)
Advisories 1
- CVE-2026-2256Medium 6.5
Command injection vulnerability in ModelScope's ms-agent
Affected: through 1.6.0rc1.
Fixed in 1.6.0 (released Mar 23, 2026, 21 days after disclosure), the first release outside every affected range (no listed fixed version clears them all).
The latest release, 1.6.0, is not affected.