PT-2026-135324

A vulnerability has been found in deepset-ai farm up to 0.8.0. Affected is the function WordEmbedding LM.load of the file farm/modeling/language model.py of the component Model Package Loader. The manipulation of the argument embeddings filename leads to path traversal. An attack has to be...