33 matches found
saffron
Saffron-1: Inference Scaling for LLM Safety Assurance 📖 Paper 🛠️ Dependencies The code was tested under the following dependencies: Python 3.12.3 CUDA 12.2 typingextensions==4.14.0 numpy==2.2.6 torch==2.5.1 huggingfacehub==0.30.2 accelerate==1.1.1 datasets==3.1.0 evaluate==0.4.3...
deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-9856 via transformers (4.21.2)
transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-9856 Source advisory:...
deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-5241 via transformers (4.21.2)
transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-5241 Source advisory:...
deepspeed-mii (>=0.0.1, <=0.0.2), farm-haystack (>=1.9.0rc1, <=1.11.1) +5 more potentially affected by CVE-2026-5241 via transformers (4.21.2)
transformers PYPI version 4.21.2 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - deepspeed-mii =0.0.1, =1.9.0rc1, =1.0.0, =0.2.13.dev20230218132015, =0.1.5, =0.0.2, =0.0.7 Source cves: CVE-2026-5241 Source advisory:...
EUVD-2024-0034
Malicious code in bioql PyPI...
aistrainer (>=0.0.1, <=0.0.13), aivoifu (>=0.2.8, <=0.2.9) +45 more potentially affected by unknown CVE via deepspeed (>=0.4.0, <=0.15.1)
deepspeed PYPI version =0.4.0, =0.0.1, =0.2.8, =0.1.0, =0.2.0, =0.1.2, =1.0.2, =1.1.1 - lmflow-benchmark 0.0.1 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEEPSPEED-8320951...
Command Injection
Overview deepspeed is a DeepSpeed library Affected versions of this package are vulnerable to Command Injection when multiple instances where subprocess.run and subprocess.checkoutput, are called with unsanitized input and shell=True. An attacker would need to supply specially crafted input to...
Microsoft DeepSpeed Optimization Library Code Execution
The vulnerability of Microsoft DeepSpeed’s optimization library relates to the lack of measures taken to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability can allow attackers to execute arbitrary code...
Microsoft DeepSpeed Remote Code Execution Vulnerability
Microsoft DeepSpeed is an easy-to-use deep learning optimization software suite from Microsoft that delivers unprecedented scale and speed for DL training and inference. A remote code execution vulnerability exists in Microsoft DeepSpeed, which can be exploited by an attacker to execute arbitrary...
Vulnerabilities fixed in Microsoft Developer Tools
Microsoft has fixed vulnerabilities in several Developer Tools. A malicious person could exploit the vulnerabilities to cause a Denial-of-Service, grant themselves elevated privileges or execute arbitrary code with the victim's privileges. Successful exploitation requires the malicious party to...
aistrainer (>=0.0.1, <=0.0.11), aivoifu (>=0.2.8, <=0.2.9) +44 more potentially affected by CVE-2024-43497 via deepspeed (>=0.4.0, <=0.15.0)
deepspeed PYPI version =0.4.0, =0.0.1, =0.2.8, =0.1.0, =0.2.0, =0.1.2, =1.0.2, =1.1.1 - lmflow-benchmark 0.0.1 and more Source cves: CVE-2024-43497 Source advisory: GHSA-8CP5-3RF8-8GFH...
aistrainer (>=0.0.1, <=0.0.11), aivoifu (>=0.2.8, <=0.2.9) +44 more potentially affected by CVE-2024-43497 via deepspeed (>=0.4.0, <=0.15.0)
deepspeed PYPI version =0.4.0, =0.0.1, =0.2.8, =0.1.0, =0.2.0, =0.1.2, =1.0.2, =1.1.1 - lmflow-benchmark 0.0.1 and more Source cves: CVE-2024-43497 Source advisory: SNYK:PYTHON-DEEPSPEED-8230423...
aistrainer (>=0.0.1, <=0.0.11), aivoifu (>=0.2.8, <=0.2.9) +44 more potentially affected by CVE-2024-43497 via deepspeed (>=0.4.0, <=0.15.0)
deepspeed PYPI version =0.4.0, =0.0.1, =0.2.8, =0.1.0, =0.2.0, =0.1.2, =1.0.2, =1.1.1 - lmflow-benchmark 0.0.1 and more Source cves: CVE-2024-43497 Source advisory: OSV:GHSA-8CP5-3RF8-8GFH...
GHSA-8CP5-3RF8-8GFH DeepSpeed Remote Code Execution Vulnerability
DeepSpeed Remote Code Execution Vulnerability...
Arbitrary Command Injection
Overview deepspeed is a DeepSpeed library Affected versions of this package are vulnerable to Arbitrary Command Injection through the execution of unauthorized commands or code. An attacker can execute arbitrary code on the system by sending crafted inputs to the affected function. Remediation...
DeepSpeed Remote Code Execution Vulnerability
DeepSpeed Remote Code Execution Vulnerability...
CVE-2024-43497
DeepSpeed Remote Code Execution Vulnerability...
CVE-2024-43497
DeepSpeed Remote Code Execution Vulnerability...
aistrainer (>=0.0.1, <=0.0.11), aivoifu (>=0.2.8, <=0.2.9) +44 more potentially affected by CVE-2024-43497 via deepspeed (>=0.4.0, <=0.15.0)
deepspeed PYPI version =0.4.0, =0.0.1, =0.2.8, =0.1.0, =0.2.0, =0.1.2, =1.0.2, =1.1.1 - lmflow-benchmark 0.0.1 and more Source cves: CVE-2024-43497 Source advisory: OSV:PYSEC-2024-109...