Lucene search
+L

1 matches found

OSV
OSV
added 2021/08/25 2:41 p.m.9 views

GHSA-R6JX-9G48-2R5R Arbitrary code execution due to YAML deserialization

Impact TensorFlow and Keras can be tricked to perform arbitrary code execution when deserializing a Keras model from YAML format. python from tensorflow.keras import models payload = ''' !!python/object/new:type args: 'z', !!python/tuple , 'extend': !!python/name:exec listitems:...

9.3CVSS6.3AI score0.00447EPSS
SaveExploits1References10
Rows per page
Query Builder