WS-2024-0006

A supply chain attack was identified where the Ultralytics YOLO AI library versions 8.3.41, 8.3.42, 8.3.45, 8.3.46 were compromised via a script injection vulnerability in GitHub Actions. The vulnerability allowed attackers to introduce malicious code during the automated build process, leading t...