ai-flow Code Issue Vulnerability

ai-flow is an open source framework for connecting big data and artificial intelligence. A code issue vulnerability exists in flink-extended ai-flow version 0.3.1, which stems from a security issue in the function cloudpickle.loads in aiflowclicommandsworkflowcommand.py, leading to deserializatio...

PT-2024-15940

Name of the Vulnerable Software and Affected Versions flink-extended ai-flow version 0.3.1 Description A critical issue has been found, affecting the function cloudpickle.loads of the file ai flowclicommandsworkflow command.py. This issue leads to deserialization and can be exploited remotely. Th...

StanfordVL GibsonEnv Code Issue Vulnerability

StanfordVL GibsonEnv is a virtual environment simulator from StanfordVL Labs. A code issue vulnerability exists in StanfordVL GibsonEnv version 0.3.1, which stems from a security issue in the cloudpickle.load function in gibsonutilspposgdfuse.py, leading to deserialization...

PT-2024-15939 · Unknown · Stanfordvl Gibsonenv +1

Name of the Vulnerable Software and Affected Versions: StanfordVL GibsonEnv version 0.3.1 Description: A critical issue has been found, affecting the cloudpickle.load function of the file gibsonutilspposgd fuse.py. This issue leads to deserialization and can be exploited remotely. The complexity ...