Hydra Ecosystem Hydra code injection vulnerability

In Hydra Ecosystem, versions prior to Hydra 1.2.2—specifically 1.1.0.dev1 and 1.4.0.dev4—contain a code injection vulnerability. This vulnerability arises because the raypkgversion OmegaConf parser passes input to importlib.importmodule, potentially allowing arbitrary module imports. Attackers ca...