MosaicML Composer

• CVE-2026-109153 Medium 6.3 MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal 0.5%
• CVE-2026-10043 High 7.8 MosaicML Composer Deserialization of Untrusted Data Remote Code Execution Vulnerability 0.5%