Code Injection

flairNLP is vulnerable to code injection. The vulnerability is inadequate input validation in the ClusteringModel function of flair\models\clustering.py, allowing malicious code to be injected and executed remotely...

PT-2024-16009 · Flairnlp · Flairnlp

Name of the Vulnerable Software and Affected Versions: flairNLP flair version 0.14.0 Description: A critical vulnerability was found in the function ClusteringModel of the file flairmodelsclustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible to...