optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-35959 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-35959 Source advisory: OSV:GHSA-WXJJ-CGCX-R3VQ...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-36000 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-36000 Source advisory: OSV:GHSA-FQXC-PVF8-2W9V...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-36004 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-36004 Source advisory: OSV:GHSA-MV8M-8X97-937Q...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-36016 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-36016 Source advisory: OSV:GHSA-G468-QJ8G-VCJC...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-36015 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-36015 Source advisory: OSV:GHSA-RH87-Q4VG-M45J...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-36019 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-36019 Source advisory: OSV:GHSA-9J4V-PP28-MXV7...

SCU-Captcha 安全漏洞

SCU-Captcha is the SCU JWC CAPTCHA recognition model, based on Pytorch, which has been released on PYPI. A security vulnerability exists in SCU-Captcha that stems from the presence of a code execution backdoor inserted by a third party...

Contextual Code Execution

Description The main function uses the eval function which can lead to contextual code execution, allowing an attacker to gain access to a system and execute commands with the privileges of the running program by setting NUITKAPYTHONPATH, NUITKANAMESPACES or NUITKAPTHIMPORTED to a malicious paylo...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-29208 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-29208 Source advisory: OSV:GHSA-2R2F-G8MW-9GVR...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-29202 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-29202 Source advisory: OSV:GHSA-CWPM-F78V-7M5C...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-29200 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-29200 Source advisory: OSV:GHSA-2VV3-56QG-G2CF...

optimuspyspark (>=2.0.4, <=2.0.6), pytorch-es (>=0.1.0, <=0.1.1) +2 more potentially affected by CVE-2022-29197 via tensorflow (1.6.0)

tensorflow PYPI version 1.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - optimuspyspark =2.0.4, =0.1.0, =0.12.0, =0.7.2, =0.10.0 Source cves: CVE-2022-29197 Source advisory: OSV:GHSA-HRG5-737C-2P56...

azureml-designer-classic-modules (>=0.0.127, <=0.0.129), azureml-designer-cv-modules (>=0.0.8, <=0.0.10) +17 more potentially affected by CVE-2022-24303 via pillow (7.1.0)

pillow PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - azureml-designer-classic-modules =0.0.127, =0.0.8, =0.0.10, =0.0.7, =0.0.7, =0.0.2, =0.3.1, =0.1.1, =0.0.2, =0.0.1, =0.0.4, =0.0.3, =0.1.0 - qweb...

Pytorch-Lightning Code Injection Vulnerability

Pytorch-Lightning is an open source lightweight PyTorch wrapper for high-performance Ai research. Used for high-performance Ai research, Pytorch-Lightning is vulnerable to a code injection vulnerability that could be exploited to inject code into the GitHub repository...

anomalib (>=0.2.2, <=0.2.4), argos-trains (0.1.0) +146 more potentially affected by CVE-2022-0845 via pytorch-lightning (>=1.0.5, <=1.5.10.post0)

pytorch-lightning PYPI version =1.0.5, =0.2.2, =0.5.0rc0, =0.3.2b20220222, =0.3.2b20220222, =0.0.1, =0.0.7, =3.0.0, =0.5.9, =0.0.1, =0.1.1 - bytesep-fancybit 0.0.8 and more Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

axlnlp (0.0.1) potentially affected by CVE-2022-0845 via pytorch-lightning (0.7.3)

pytorch-lightning PYPI version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - axlnlp 0.0.1 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

formerbox (>=0.1.8, <=0.1.10), npvcc2016 (>=1.0.3, <=1.2.1) +2 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.10.0)

pytorch-lightning PYPI version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - formerbox =0.1.8, =1.0.3, =1.2.1 - pytorch-forecasting 0.5.0 - pytorch-pqrnn 0.1.0 Source cves: CVE-2022-0845 Source advisory...

asteroid (>=0.3.5, <=0.4.0), coreml (>=0.0.10, <=0.0.15) +8 more potentially affected by CVE-2022-0845 via pytorch-lightning (0.9.0)

pytorch-lightning PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.3.5, =0.0.10, =0.0.1, =0.0.2.post1, =1.0.0a4, =0.4.1, =0.2.1, =0.13.6, =0.1.0, =0.1.1 - torch-factorization-models...

asteroid (>=0.1.1, <=0.2.0), torchline (>=0.2.0, <=0.2.4.3) potentially affected by CVE-2022-0845 via pytorch-lightning (0.6.0)

pytorch-lightning PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytorch-lightning and may be impacted: - asteroid =0.1.1, =0.2.0, =0.2.4.3 Source cves: CVE-2022-0845 Source advisory: OSV:GHSA-R5QJ-CVF9-P85H...

GHSA-R5QJ-CVF9-P85H Code Injection in PyTorch Lightning

PyTorch Lightning version 1.5.10 and prior is vulnerable to code injection. An attacker could execute commands on the target OS running the operating system by setting the PLTRAINERGPUS when using the Trainer module. A patch is included in the 1.6.0 release...