385 matches found
label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)
django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory:...
label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)
django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C...
label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)
django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-1...
label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)
django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: MEND:CVE-2021-30...
Code Injection in heartexlabs/label-studio
Description Label Studio is a swiss army knife of data labeling and annotation tools which is vulnerable to Arbitrary Code Execution. Vulnerability Vulnerable to YAML deserialization attack caused by unsafe loading. Proof of Concept Installation bash pip3 install label-studio Run exploit.py impor...