nerblackbox (>=0.0.15, <=1.0.0) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.34)

label-studio-sdk PYPI version 0.0.34 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - nerblackbox =0.0.15, =1.0.0 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

datapipe-label-studio-lite (>=0.2.0, <=0.3.3) potentially affected by CVE-2025-25295 via label-studio-sdk (0.0.16)

label-studio-sdk PYPI version 0.0.16 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio-sdk and may be impacted: - datapipe-label-studio-lite =0.2.0, =0.3.3 Source cves: CVE-2025-25295 Source advisory: OSV:PYSEC-2026-1506...

CVE-2025-25295 Label Studio has a Path Traversal Vulnerability via image Field

Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a...

CVE-2025-25295 Label Studio has a Path Traversal Vulnerability via image Field

Label Studio is an open source data labeling tool. A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. The flaw exists in the VOC, COCO and YOLO export functionalities. These functions invoke a...