aistrainer (>=0.0.1 <=0.0.11), aivoifu (>=0.2.8 <=0.2.9) +20 more potentially affected by CVE-2024-43497 via deepspeed (>=0.10.2 <=0.15.0)

deepspeed PYPI version =0.10.2, =0.0.1, =0.2.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =0.1.0, =0.4.1 and more Source cves: CVE-2024-43497 Source advisory: SNYK:PYTHON-DEEPSPEED-8230423...

CVE-2024-43497

DeepSpeed Remote Code Execution Vulnerability...

CVE-2024-43497

DeepSpeed Remote Code Execution Vulnerability...

CVE-2024-43497

creationtimestamp| type| source ---|---|--- 2024-10-08 17:54:47+00:00| seen| https://www.thezdi.com/blog/2024/10/8/the-october-2024-security-update-review 2026-07-17 18:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqudqefr4w2m...

CVE-2024-43497 DeepSpeed Remote Code Execution Vulnerability

...

CVE-2024-43497

CVE-2024-43497 covers a DeepSpeed remote code execution vulnerability. Connected sources indicate Microsoft DeepSpeed is affected (including DeepSpeed versions before 0.15.1 per Nessus plugin), enabling arbitrary code execution under exploitable conditions. Public references describe the issue as...