Lucene search
+L

1 matches found

OSV
OSV
added 2024/02/23 6:15 p.m.9 views

AZL-35146 CVE-2024-27318 affecting package pytorch for versions less than 2.2.2-1

Versions of the package onnx before and including 1.15.0 are vulnerable to Directory Traversal as the externaldata field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory. The vulnerability occurs as a bypass for the patch adde...

7.5CVSS6.6AI score0.01189EPSS
SaveExploits0References1
Rows per page
Query Builder