GHSA-M724-HQMC-GGPX GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

CVE-2024-12216

A vulnerability in the "ImageClassificationDataset.fromcsv" API of the "dmlc/gluon-cv" repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts "tar.gz" files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers...