CVE-2026-109155

A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not...

CVE-2026-109155

A path traversal vulnerability exists in DeepPavlov versions up to 1.7.0 . The flaw resides in the untar function within the Model Download Handler component. This vulnerability allows for remote execution of a path traversal attack. While the issue was reported via a project issue report, the pr...

cde (>=0.1.0, <=0.2.0.1), deeppavlov (>=0.0.5.1, <=0.0.5.3) potentially affected by CVE-2026-9335 via keras (2.1.2)

keras PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - cde =0.1.0, =0.0.5.1, =0.0.5.3 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...

deeppavlov (>=0.0.6b0, <=0.4.0) potentially affected by CVE-2026-9335 via keras (2.2.0)

keras PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - deeppavlov =0.0.6b0, =0.4.0 Source cves: CVE-2026-9335 Source advisory: OSV:GHSA-M8WH-29WM-52MV...