fancy-nlp (>=0.0.1, <=0.0.4), keras-eval (>=0.0.34, <=0.0.40) +2 more potentially affected by CVE-2025-47273 via setuptools (39.1.0)

setuptools PYPI version 39.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fancy-nlp =0.0.1, =0.0.34, =0.2.0, =0.1.0.21, =0.1.0.23 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

dsp-tools (1.17.1), elementary-flask (>=0.0.1.dev13, <=0.0.1.dev17) +3 more potentially affected by CVE-2025-47273 via setuptools (65.2.0)

setuptools PYPI version 65.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dsp-tools 1.17.1 - elementary-flask =0.0.1.dev13, =0.1.0, =2.2.6, =2.2.8 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3X...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2025-2099 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2025-2099 Source advisory: OSV:GHSA-QQ3J-4F4F-9583...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2025-2099 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2025-2099 Source advisory: OSV:GHSA-QQ3J-4F4F-9583...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2025-2099 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2025-2099 Source advisory: OSV:PYSEC-2025-40...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2025-2099 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2025-2099 Source advisory: OSV:PYSEC-2025-40...

dsp-tools (1.17.1), elementary-flask (>=0.0.1.dev13, <=0.0.1.dev17) +3 more potentially affected by CVE-2025-47273 via setuptools (65.2.0)

setuptools PYPI version 65.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dsp-tools 1.17.1 - elementary-flask =0.0.1.dev13, =0.1.0, =2.2.6, =2.2.8 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

fancy-nlp (>=0.0.1, <=0.0.4), keras-eval (>=0.0.34, <=0.0.40) +2 more potentially affected by CVE-2025-47273 via setuptools (39.1.0)

setuptools PYPI version 39.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fancy-nlp =0.0.1, =0.0.34, =0.2.0, =0.1.0.21, =0.1.0.23 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

hc-nlp (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-47783 via label-studio (0.8.1)

label-studio PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - hc-nlp =0.1.0, =0.2.0 Source cves: CVE-2025-47783 Source advisory: OSV:GHSA-8JHR-WPCM-HH4H...

hc-nlp (>=0.1.0, <=0.2.0) potentially affected by CVE-2025-47783 via label-studio (0.8.1)

label-studio PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - hc-nlp =0.1.0, =0.2.0 Source cves: CVE-2025-47783 Source advisory: OSV:PYSEC-2025-124...

dataops-toolkits (>=0.1.1, <=0.1.2), hc-nlp (>=0.1.0, <=0.2.0) +1 more potentially affected by CVE-2025-47783 via label-studio (>=0.8.1, <=1.17.0)

label-studio PYPI version =0.8.1, =0.1.1, =0.1.0, =0.1.0, =0.1.2 Source cves: CVE-2025-47783 Source advisory: MEND:CVE-2025-47783...

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261 GAIR-NLP factool tool.py run_single code injection

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

CVE-2025-4261

CVE-2025-4261 affects GAIR-NLP factool, specifically the run_single function in factool/factool/math/tool.py. The cited pattern indicates a code injection vulnerability introduced up to commit 3f3914bc090b644be044b7e0005113c135d8b20f, with local access required for exploitation. Multiple connecte...

CVE-2025-4261: Improper Control of Generation of Code

A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function runsingle of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The...

PT-2025-19336 · Unknown · Gair-Nlp Factool

Name of the Vulnerable Software and Affected Versions: GAIR-NLP factool versions up to 3f3914bc090b644be044b7e0005113c135d8b20f Description: A critical issue has been found in GAIR-NLP factool, affecting the run single function of the file factool/factool/math/tool.py. This issue leads to code...