Lucene search
+L

20 matches found

Github Security Blog
Github Security Blog
•added 2026/09/10 10:47 a.m.•3 views

Malicious code in falcor-datasource-chainer (npm)

--- Credit: OpenSSF source...

5.8AI score
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/29 12:00 a.m.•23 views

PT-2026-53403

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send file function is used unsafely...

9.3CVSS8.3AI score0.01404EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2025/05/23 7:30 a.m.•15 views

CVE-2024-48206

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

9.8CVSS6AI score0.00834EPSS
SaveExploits0References1
Veracode
Veracode
•added 2024/11/18 7:42 a.m.•24 views

Deserialization Of Untrusted Data

Chainer is vulnerable to Deserialization of Untrusted Data. The vulnerability is due to improper handling of deserialization, allowing the execution of arbitrary code...

9.8CVSS6.2AI score0.00834EPSS
SaveExploits0References3Affected Software1
CNVD
CNVD
•added 2024/10/30 12:00 a.m.•17 views

Chainer Remote Code Execution Vulnerability

Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits0
Snyk
Snyk
•added 2024/10/29 9:41 p.m.•10 views

Deserialization of Untrusted Data

Overview chainer is an A flexible framework of neural networks Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the chainermn module, in the communication utility component. Details Serialization is a process of converting an object into a sequence of byte...

9.8CVSS5.8AI score0.00834EPSS
SaveExploits0References2
NVD
NVD
•added 2024/10/29 9:15 p.m.•22 views

CVE-2024-48206

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

9.8CVSS0.00834EPSS
SaveExploits0References2
CVE
CVE
•added 2024/10/29 12:00 a.m.•73 views

CVE-2024-48206

The deep learning framework chainer (specifically version v7.8.1.post1 ) is vulnerable to a Deserialization of Untrusted Data vulnerability. This issue exists within the chainermn module's communication utility component, where the software fails to sufficiently verify data during deserialization...

9.8CVSS6.2AI score0.00834EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/10/29 12:00 a.m.•10 views

CVE-2024-48206

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

6.2AI score0.00834EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/10/29 12:00 a.m.•6 views

CVE-2024-48206: Deserialization of Untrusted Data

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

9.8CVSS6.3AI score0.00834EPSS
SaveExploits0References1
Mend
Mend
•added 2024/10/29 12:00 a.m.•12 views

CVE-2024-48206

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

9.8CVSS6.2AI score0.00834EPSS
SaveExploits0References2
vulnersOsv
vulnersOsv
•added 2024/10/29 12:00 a.m.•3 views

bounded-prescience (0.0.3), chainer-chemistry (0.7.1) +21 more potentially affected by CVE-2024-48206 via chainer (>=6.0.0, <=7.8.1)

chainer PYPI version =6.0.0, =0.1.0, =0.2.0, =0.3.0, =0.0.1, =0.1.0, =0.6.1, =0.2.0, =0.6.0.post1, =1.3.1rc2, =2024.0.0, =2024.0.1 and more Source cves: CVE-2024-48206 Source advisory: MEND:CVE-2024-48206...

9.8CVSS5.8AI score0.00834EPSS
SaveExploits0
CNNVD
CNNVD
•added 2024/10/29 12:00 a.m.•19 views

Chainer security vulnerabilities

Chainer is an open source deep learning framework from Chainer Open Source. A security vulnerability exists in Chainer version v7.8.1.post1, which stems from untrusted data deserialization and can lead to arbitrary code execution. No detailed vulnerability details are provided at this time...

9.8CVSS6.5AI score0.00834EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/10/29 12:00 a.m.•36 views

CVE-2024-48206

A Deserialization of Untrusted Data vulnerability in chainer v7.8.1.post1 leads to execution of arbitrary code...

0.00834EPSS
SaveExploits0References2
osv_mal
osv_mal
•added 2024/06/25 12:42 p.m.•13 views

MAL-2024-2356 Malicious code in falcor-datasource-chainer (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/06/25 12:42 p.m.•10 views

Malicious code in falcor-datasource-chainer (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
NVD
NVD
•added 2022/07/11 1:15 a.m.•44 views

CVE-2022-31573

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01404EPSS
SaveExploits1References1
CVE
CVE
•added 2022/07/11 1:01 a.m.•125 views

CVE-2022-31573

CVE-2022-31573 affects the chainer/chainerrl-visualizer project (up to version 0.1.1). The vulnerability arises from unsafe use of Flask send_file, enabling absolute path traversal and potential access to arbitrary files on the server. Multiple connected sources (Red Hat, Veracode, CNVD, OSV, CNV...

9.3CVSS9.3AI score0.01404EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/07/11 1:01 a.m.•13 views

CVE-2022-31573

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS0.01404EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/11 12:00 a.m.•9 views

CVE-2022-31573: Improper Limitation of a Pathname to a Restricted Directory

The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

9.3CVSS8.1AI score0.01404EPSS
SaveExploits1References2
Rows per page
Query Builder