autogluon-extra (>=0.0.15b20201205, <=0.0.16b20210104), autogluon-tabular (>=0.0.15b20201205, <=0.0.16b20210104) +26 more potentially affected by CVE-2024-12216 via gluoncv (>=0.3.0, <=0.9.0)

gluoncv PYPI version =0.3.0, =0.0.15b20201205, =0.0.15b20201205, =0.0.15b20201205, =0.1.1, =0.1.0, =0.0.1, =0.0.20 - monk-cpu 0.0.1 - monk-cpu-test 0.0.11 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-cuda90 0.0.1 - monk-cuda90-test 0.0.1 -...

GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

PYSEC-2026-1406 GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

autogluon-extra (>=0.0.15b20201205, <=0.0.16b20210104), autogluon-tabular (>=0.0.15b20201205, <=0.0.16b20210104) +26 more potentially affected by CVE-2024-12216 via gluoncv (>=0.3.0, <=0.9.0)

gluoncv PYPI version =0.3.0, =0.0.15b20201205, =0.0.15b20201205, =0.0.15b20201205, =0.1.1, =0.1.0, =0.0.1, =0.0.20 - monk-cpu 0.0.1 - monk-cpu-test 0.0.11 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-cuda90 0.0.1 - monk-cuda90-test 0.0.1 -...

autogluon-extra (>=0.0.15b20201205, <=0.0.16b20210104), autogluon-tabular (>=0.0.15b20201205, <=0.0.16b20210104) +26 more potentially affected by CVE-2024-12216 via gluoncv (>=0.3.0, <=0.9.0)

gluoncv PYPI version =0.3.0, =0.0.15b20201205, =0.0.15b20201205, =0.0.15b20201205, =0.1.1, =0.1.0, =0.0.1, =0.0.20 - monk-cpu 0.0.1 - monk-cpu-test 0.0.11 - monk-cuda100 0.0.1 - monk-cuda100-test 0.0.1 - monk-cuda101 0.0.1 - monk-cuda101-test 0.0.1 - monk-cuda90 0.0.1 - monk-cuda90-test 0.0.1 -...

GHSA-M724-HQMC-GGPX GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview gluoncv is a Gluon CV Toolkit Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the fromcsv function in ImageClassificationDataset. An attacker can overwrite files on the victim's system by using this function to extract maliciou...

PT-2025-12125

Name of the Vulnerable Software and Affected Versions dmlc/gluon-cv version 0.10.0 Description A vulnerability in the ImageClassificationDataset.from csv API allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it...