Insecure Deserialization

autoprognosis is vulnerable to Insecure Deserialization. The vulnerability is due to loading untrusted data from loadmodelfromfile function within the Release Note Handler component, resulting in Command Injection...

van_der_Schaar LAB AutoPrognosis Code Issue Vulnerability

AutoPrognosis is a vanderSchaar LAB open source predictive modeling pipeline for clinical prognosis. A code issue vulnerability exists in vanderSchaar LAB AutoPrognosis version 0.1.21, which stems from a security vulnerability in the loadmodelfromfile function in the component Release Note Handle...