nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2024-11394 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2024-11394 Source advisory: OSV:PYSEC-2024-229...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2024-11393 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2024-11393 Source advisory: OSV:PYSEC-2024-228...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2024-11393 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2024-11393 Source advisory: OSV:PYSEC-2024-228...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2024-11394 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2024-11394 Source advisory: OSV:PYSEC-2024-229...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2024-11392 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2024-11392 Source advisory: OSV:PYSEC-2024-227...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2024-11392 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2024-11392 Source advisory: OSV:PYSEC-2024-227...

Flair allows arbitrary code execution

A vulnerability, which was classified as critical, was found in flairNLP flair 0.14.0. Affected is the function ClusteringModel of the file flair\models\clustering.py of the component Mode File Loader. The manipulation leads to code injection. It is possible to launch the attack remotely. The...

Security Bulletin: Multiple vulnerabilities in Watson NLP affect IBM Robotic Process Automation

Summary Multiple vulnerabilities in Watson NLP affect IBM Robotic Process Automation. Watson NLP is used by IBM Robotic Process Automation for Natural Language Understanding. This bulletin identifies the security fixes to apply to address the vulnerabilities. Vulnerability Details...

bubbletea-py (0.0.1), raylab (0.15.10) +3 more potentially affected by CVE-2024-42474 via streamlit (0.82.0)

streamlit PYPI version 0.82.0 is affected by a known vulnerability. The following packages have a transitive dependency on streamlit and may be impacted: - bubbletea-py 0.0.1 - raylab 0.15.10 - suzieq =0.13.0, =0.14.2 - torchserve-dashboard 0.4.0 - twilight-nlp 0.1.0 Source cves: CVE-2024-42474...

fancy-nlp (>=0.0.1, <=0.0.4), nyoka (>=1.0.0, <=1.5.4) +3 more potentially affected by CVE-2023-33976 via tensorflow (1.9.0)

tensorflow PYPI version 1.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - fancy-nlp =0.0.1, =1.0.0, =0.11.0, =0.5.4, =0.5.7 Source cves: CVE-2023-33976 Source advisory: OSV:GHSA-GJH7-XX4R-X345...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-33976 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-33976...

cf-nlp (>=0.1.0, <=0.1.1), dlgo (0.2.0) +2 more potentially affected by CVE-2023-33976 via tensorflow (1.10.1)

tensorflow PYPI version 1.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - cf-nlp =0.1.0, =0.6.0, =0.6.1 Source cves: CVE-2023-33976 Source advisory: OSV:GHSA-GJH7-XX4R-X345...

fact-checking (0.0.1), hc-nlp (>=0.1.0, <=0.2.0) +3 more potentially affected by CVE-2024-39700 via jupyterlab (2.2.9)

jupyterlab PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - fact-checking 0.0.1 - hc-nlp =0.1.0, =0.0.2, =0.0.5 - muvimaker 0.2.6b0 - zero-shot-re 0.0.4 Source cves: CVE-2024-39700 Source advisory:...

dsp-tools (1.17.1), elementary-flask (>=0.0.1.dev13, <=0.0.1.dev17) +3 more potentially affected by CVE-2024-6345 via setuptools (65.2.0)

setuptools PYPI version 65.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - dsp-tools 1.17.1 - elementary-flask =0.0.1.dev13, =0.1.0, =2.2.6, =2.2.8 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW...

fancy-nlp (>=0.0.1, <=0.0.4), keras-eval (>=0.0.34, <=0.0.40) +2 more potentially affected by CVE-2024-6345 via setuptools (39.1.0)

setuptools PYPI version 39.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - fancy-nlp =0.0.1, =0.0.34, =0.2.0, =0.1.0.21, =0.1.0.23 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

alfrodull (0.1.0), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +3 more potentially affected by CVE-2024-5569 via zipp (0.5.1)

zipp PYPI version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - alfrodull 0.1.0 - getccwarc =0.0.1.dev23, =1.2.2, =0.0.2, =0.0.3 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...

ft-api (1.0.1), jumpdb (>=0.0.4, <=0.0.6) +5 more potentially affected by CVE-2024-5569 via zipp (1.0.0)

zipp PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on zipp and may be impacted: - ft-api 1.0.1 - jumpdb =0.0.4, =0.7.2, =1.0.0, =0.1.0, =0.1.12 Source cves: CVE-2024-5569 Source advisory: OSV:GHSA-JFMJ-5V4G-7637...

nlp-architect (0.5.2), vtorch (0.1.69) potentially affected by CVE-2024-3568 via transformers (2.2.1)

transformers PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - nlp-architect 0.5.2 - vtorch 0.1.69 Source cves: CVE-2024-3568 Source advisory: OSV:GHSA-37Q5-V5QM-C9V8...

allennlp (>=0.9.1.dev20200220, <=0.9.1.dev20200401), anilv-interpret-text (0.0.1) +9 more potentially affected by CVE-2024-3568 via transformers (2.4.1)

transformers PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200220, =0.5.8, =0.1.2, =0.0.12b0, =1.0.1, =1.0.0.dev202005031000, =0.1.1, =0.2.2, =0.3.0, =0.5.11 Source cves:...

custom-glue (>=0.0.1, <=0.0.6), megatron-bridge (>=0.3.0, <=0.3.1) +2 more potentially affected by CVE-2024-3568 via transformers (2.3.0)

transformers PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - custom-glue =0.0.1, =0.3.0, =0.0.5, =0.0.9 - nlp-architect 0.5.3 Source cves: CVE-2024-3568 Source advisory: OSV:GHSA-37Q5-V5QM-C9V8...