USN-6891-1: Python vulnerabilities

It was discovered that Python incorrectly handled certain inputs. An attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 14.04 LTS and Ubuntu 18.04 LTS. CVE-2015-20107 It was discovered that Python incorrectly used regular expressions vulnerable to...

Remote Code Execution (RCE)

ait-core is vulnerable to Remote Code Execution RCE. The vulnerability is caused due to loading untrusted pickle files, allowing attackers to execute arbitrary code...

Deserialization Of Untrusted Data

joblib is vulnerable to Deserialization Of Untrusted Data. The vulnerability is due to unsafe handling of pickle files in the readarray function within numpypickle.py where pickle.load is enabled by default. This allows an attacker to execute arbitrary code by loading a maliciously crafted pickle...

Insecure Deserialization

huggingface transformers is vulnerable to Insecure Deserialization. The vulnerability is due to the ability to load arbitrary pickle files from other repos specified by the indexpath while parsing the remote config.json fille. An attacker can exploit this flaw to execute arbitrary code on the...

Remote Code Execution (RCE)

superset is vulnerable to a remote code execution RCE attack. The library does not properly handle the deserialization of .pickle files, allowing a malicious user to inject and execute arbitrary code through it...

Remote Code Execution (RCE)

conference-scheduler-cli is vulnerable to remote code execution RCE attacks. The library does not properly handle the deserialization of .pickle files, allowing a malicious user to inject and execute arbitrary code through it...