easy-transformers (0.17.0), feedbackqa-bart (>=0.1.0rc1, <=0.1.0rc2) +2 more potentially affected by CVE-2026-66007 via datasets (2.2.1)

datasets PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - easy-transformers 0.17.0 - feedbackqa-bart =0.1.0rc1, =1.1.0, =1.7.0, =1.7.2 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H5...

easy-transformers (0.17.0), feedbackqa-bart (>=0.1.0rc1, <=0.1.0rc2) +2 more potentially affected by CVE-2026-66007 via datasets (2.2.1)

datasets PYPI version 2.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - easy-transformers 0.17.0 - feedbackqa-bart =0.1.0rc1, =1.1.0, =1.7.0, =1.7.2 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

CVE-2021-24040

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0...

CVE-2021-39207

parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding...

MAL-2022-5214 Malicious code in parlai-mephisto-task-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09495931dcfc8a6bb66d0754c6551c12e6cbae08ea207828dcd98127c20c2360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5215 Malicious code in parlai-mturk-task-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01524d470a8b7dd3d7f042e28bb40d9628cdf193eff995dabd67dc4ac1082156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parlai-mephisto-task-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09495931dcfc8a6bb66d0754c6551c12e6cbae08ea207828dcd98127c20c2360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in parlai-mturk-task-compiler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 01524d470a8b7dd3d7f042e28bb40d9628cdf193eff995dabd67dc4ac1082156 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in parlai-mturk-task-compiler

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in parlai-mephisto-task-compiler

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

parlai code issue vulnerability

parlai is used to train and evaluate AI models on a variety of publicly available conversational datasets. parlai suffers from a code issue vulnerability that stems from an insecure loading package that is vulnerable to YAML deserialization attacks in the affected version. An attacker could explo...

Facebook ParlAI 1.0.0 Code Execution / Deserialization

Exploit Title: Facebook ParlAI 1.0.0 - Deserialization of Untrusted Data in parlai Date: 2021-09-11 Exploit Author: Abhiram V Vendor Homepage: https://parl.ai/ Software Link: https://github.com/facebookresearch/ParlAI Version: 1.1.0 Tested on: Linux CVE: CVE-2021-24040 References :...

Deserialization of Untrusted Data in ParlAI

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0...

GHSA-MWGJ-7X7J-6966 Deserialization of Untrusted Data in ParlAI

Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. This issue affects ParlAI prior to v1.1.0...

GHSA-M87F-9FVV-2MGG Deserialization of Untrusted Data in parlai

Impact Due to use of unsafe YAML deserialization logic, an attacker with the ability to modify local YAML configuration files could provide malicious input, resulting in remote code execution or similar risks. Patches The issue can be patched by upgrading to v1.1.0 or later. It can also be patche...

Facebook ParlAI 1.0.0 - Deserialization of Untrusted Data in parlai Vulnerability

Exploit Title: Facebook ParlAI 1.0.0 - Deserialization of Untrusted Data in parlai Exploit Author: Abhiram V Vendor Homepage: https://parl.ai/ Software Link: https://github.com/facebookresearch/ParlAI Version: 1.1.0 Tested on: Linux CVE: CVE-2021-24040 References :...

Facebook ParlAI 1.0.0 - Deserialization of Untrusted Data in parlai

Exploit Title: Facebook ParlAI 1.0.0 - Deserialization of Untrusted Data in parlai Date: 2021-09-11 Exploit Author: Abhiram V Vendor Homepage: https://parl.ai/ Software Link: https://github.com/facebookresearch/ParlAI Version: 1.1.0 Tested on: Linux CVE: CVE-2021-24040 References :...

CVE-2021-39207

parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding...

CVE-2021-39207

parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding...

CVE-2021-39207

parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding...