Deserialization of Untrusted Data

Overview flair is an A very simple framework for state-of-the-art NLP Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the ClusteringModel.load function. An attacker can execute arbitrary code by providing a malicious model file that is loaded through this...