2 matches found
CVE-2021-39207
parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding...
8.8CVSS9.7AI score0.17353EPSS
SaveExploits4References3
PYSEC-2021-334
parlai is a framework for training and evaluating AI models on a variety of openly available dialogue datasets. In affected versions the package is vulnerable to YAML deserialization attack caused by unsafe loading which leads to Arbitary code execution. This security bug is patched by avoiding...
8.8CVSS7.5AI score0.01794EPSS
SaveExploits0References3Affected Software1
20