CVE-2024-0960

creationtimestamp| type| source ---|---|--- 2024-01-27 13:26:31+00:00| seen| https://t.me/ctinow/174759 2024-02-20 00:01:45+00:00| seen| https://t.me/ctinow/187984...

CVE-2024-0960

CVE-2024-0960 affects the open-source framework flink-extended ai-flow 0.3.1 . The vulnerability targets the function cloudpickle.loads within the file ai_flow/cli/commands/workflow_command.py , enabling a deserialization flaw. According to connected sources, the attack can be launched remotely o...