arelight (0.24.0), cached-path (>=1.2.0, <=1.3.4) +10 more potentially affected by CVE-2026-112909 via filelock (3.9.1)

filelock PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - arelight 0.24.0 - cached-path =1.2.0, =3.0.0, =1.1.0, =0.6.4, =0.2.0, =0.3.1, =0.2.1, =0.0.0, =4.15.1, =4.16.3 Source cves: CVE-2026-112909 Sour...

CVE-2026-112100

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112098

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

EUVD-2026-104138

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112100

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112100 DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112100

A code injection vulnerability exists in DeepPavlov up to version 1.7.0 . The flaw is located in the MultiTaskPipelinePreprocessor.__init__ function within the file deeppavlov/models/preprocessors/multitask_preprocessor.py. An attacker can perform a remote attack by manipulating the preprocessor ...

CVE-2026-112100 DeepPavlov multitask_preprocessor.py MultiTaskPipelinePreprocessor.__init__ code injection

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112098

A security flaw exists in DeepPavlov up to version 1.7.0 within the Config Reference Resolver component. Specifically, the resolve function in the file deeppavlov/core/common/params.py is vulnerable to code injection due to improper input handling. This vulnerability can be exploited remotely , a...

CVE-2026-112098

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

EUVD-2026-104130

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

CVE-2026-112098 DeepPavlov Config Reference Resolver params.py resolve code injection

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

PT-2026-117272

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

PT-2026-117303

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor. init of the file deeppavlov/models/preprocessors/multitask preprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried...

CVE-2026-112100: Improper Control of Generation of Code

A vulnerability was determined in DeepPavlov up to 1.7.0. This affects the function MultiTaskPipelinePreprocessor.init of the file deeppavlov/models/preprocessors/multitaskpreprocessor.py. This manipulation of the argument preprocessor causes code injection. The attack is possible to be carried o...

CVE-2026-112098: Improper Control of Generation of Code

A security flaw has been discovered in DeepPavlov up to 1.7.0. Impacted is the function resolve of the file deeppavlov/core/common/params.py of the component Config Reference Resolver. The manipulation results in code injection. The attack can be launched remotely. The exploit has been released t...

DeepPavlov Team: Vulnerability in input validation

The DeepPavlov team has identified a security vulnerability in versions 1.7.0 and earlier of DeepPavlov. This vulnerability stems from improper handling of the resolve function in the Config Reference Resolver component’s deeppavlov/core/common/params.py file, which may lead to remote code...

DeepPavlov Team: Vulnerability in input validation

The DeepPavlov team has identified a security vulnerability in versions of DeepPavlov 1.7.0 and earlier. This vulnerability stems from incorrect handling of the processor parameter in the init function of the deeppavlov/models/preprocessors/multitaskpreprocessor.py file. It may lead to remote cod...