al-for-design (0.0.1), autogluon (>=0.0.5, <=0.5.3) +41 more potentially affected by CVE-2024-12216 via gluoncv (>=0.3.0, <=0.10.5.post0)

gluoncv PYPI version =0.3.0, =0.0.5, =0.0.15b20201024, =0.0.15b20201024, =0.0.15b20201024, =1.0.0, =0.1.1, =0.1.0, =0.0.6, =0.0.3, =0.0.1, =0.0.20 - monk-colab 0.0.1 - monk-colab-test 0.0.1 - monk-cpu 0.0.1 - monk-cpu-test 0.0.11 and more Source cves: CVE-2024-12216 Source advisory:...

autogluon.multimodal vulnerable to unsafe YAML deserialization

Impact A potential unsafe deserialization issue exists within the autogluon.multimodal module, where YAML files are loaded via yaml.load instead of yaml.safeload. The deserialization of untrusted data may allow an unprivileged third party to cause remote code execution, denial of service, and...

GHSA-6H2X-4GJF-JC5W autogluon.multimodal vulnerable to unsafe YAML deserialization

Impact A potential unsafe deserialization issue exists within the autogluon.multimodal module, where YAML files are loaded via yaml.load instead of yaml.safeload. The deserialization of untrusted data may allow an unprivileged third party to cause remote code execution, denial of service, and...