29 matches found
EUVD-2026-83796
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...
CVE-2026-94092
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...
CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...
CVE-2026-94092
dmlc/dgl (Deep Graph Library) versions up to 2.1.0 are affected by an unsafe deserialization vulnerability in the load_info/_read_torch_data function within utils.py . Manipulating the path argument allows a remote attacker with low privileges and passive user interaction to trigger deserializati...
CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...
CVE-2026-94092 dmlc dgl utils.py _read_torch_data deserialization
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...
PT-2026-96011
Name of the Vulnerable Software and Affected Versions dmlc dgl versions prior to 2.1.0 Description A remote attack is possible through the manipulation of the path argument in the load info/ read torch data function within the utils.py file, leading to deserialization. Deserialization occurs when...
CVE-2026-94092: Deserialization of Untrusted Data
A vulnerability was detected in dmlc dgl up to 2.1.0. This impacts the function loadinfo/readtorchdata of the file utils.py. Performing a manipulation of the argument path results in deserialization. The attack can be initiated remotely. The exploit is now public and may be used. The project was...
MAL-2026-1432 Malicious code in dgl-cu117 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4f9fcfe9f469df3c132eca5b08bac4a30c146c7b1305f506fd900b1e78581b0d During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
cugraph-cu11 (>=25.4.0, <=25.4.1), cugraph-cu12 (>=25.4.0, <=25.4.1) +21 more potentially affected by CVE-2026-23528 via distributed (2025.2.0)
distributed PYPI version 2025.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - cugraph-cu11 =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.5.0, =25.5.0, =25.5.1 - cuxfilter-cu11 25.4.0 - cuxfilter-cu12...
dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Impact Dgl implements rpc server startserver in rpcserver.py for supporting the RPC communications among different remote users over networks. It relies on pickle serialize and deserialize to pack and unpack network messages. The is a known risk in pickle deserialization functionality that can be...
GHSA-3X5X-FW77-G54C dmlc/dgl Vulnerable to Remote Code Execution by Pickle Deserialization via rpc.recv_request()
Impact Dgl implements rpc server startserver in rpcserver.py for supporting the RPC communications among different remote users over networks. It relies on pickle serialize and deserialize to pack and unpack network messages. The is a known risk in pickle deserialization functionality that can be...
adbdgl-adapter (>=1.0.0, <=1.0.2), embeddings-for-trees (>=1.0.0, <=1.1.0) +2 more potentially affected by unknown CVE via dgl (0.6.1)
dgl PYPI version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - adbdgl-adapter =1.0.0, =1.0.0, =0.1.0, =0.1.1 - verbcl-graph4nlp-cpu 0.1.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...
gsg (>=0.3.0, <=0.6.1) potentially affected by unknown CVE via dgl (0.9.0)
dgl PYPI version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - gsg =0.3.0, =0.6.1 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...
gqlalchemy (1.4.0), smprecursorprediction (0.0.1) +4 more potentially affected by unknown CVE via dgl (0.9.1)
dgl PYPI version 0.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - gqlalchemy 1.4.0 - smprecursorprediction 0.0.1 - spacr 0.1.0 - tumourkit 0.1.4 - weathon =0.0.0.15, =0.0.0.20 - webspot 0.0.1 Source cves: unknown CVE...
adbdgl-adapter (>=2.0.0, <=3.0.1), alignn (>=2021.9.29, <=2024.12.12) +78 more potentially affected by unknown CVE via dgl (>=2.0.0, <=2.2.1)
dgl PYPI version =2.0.0, =2.0.0, =2021.9.29, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.2, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...
adbdgl-adapter (>=2.0.0, <=3.0.1), alignn (>=2021.9.29, <=2024.12.12) +78 more potentially affected by unknown CVE via dgl (>=2.0.0, <=2.2.1)
dgl PYPI version =2.0.0, =2.0.0, =2021.9.29, =0.0.4, =1.0.0a2, =0.1.0, =1.0.21, =0.1.1, =1.0.0b3, =0.0.1, =0.2.0, =0.0.1, =0.1.2, =0.0.1, =0.0.5 and more Source cves: unknown CVE Source advisory: GHSA-3X5X-FW77-G54C...
spirograph (0.0.0) potentially affected by unknown CVE via dgl (0.8.0.post1)
dgl PYPI version 0.8.0.post1 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - spirograph 0.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...
photonai-graph (0.2.5) potentially affected by unknown CVE via dgl (1.0.0)
dgl PYPI version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - photonai-graph 0.2.5 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54C...
alignn (2025.4.1), atomgpt (2024.11.30) +2 more potentially affected by unknown CVE via dgl (1.1.1)
dgl PYPI version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on dgl and may be impacted: - alignn 2025.4.1 - atomgpt 2024.11.30 - atomvision =2022.10.23, =2023.1.27 - fusemap 0.0.0 Source cves: unknown CVE Source advisory: OSV:GHSA-3X5X-FW77-G54...