NPC-Worldwide npcpy

• CVE-2026-122015 Medium 6.3 NPC-Worldwide npcpy MLX Provider response.py get_mlx_response input validation 0.3%
• CVE-2026-122014 Medium 6.3 NPC-Worldwide npcpy sft.py load_sft_model code injection 0.3%