CVE-2022-31545

The CVE-2022-31545 vulnerability affects the ml-inory/ModelConverter repository (up to 2021-04-26). It is caused by unsafe usage of Flask send_file, enabling absolute path traversal. The public description explicitly states this leads to path traversal in that repository.

PT-2022-20817

Name of the Vulnerable Software and Affected Versions ml-inory/ModelConverter versions prior to 2021-04-26 Description The issue allows absolute path traversal due to the unsafe use of the Flask send file function. Recommendations For versions prior to 2021-04-26, update to a version that safely...

CVE-2022-31545: Improper Limitation of a Pathname to a Restricted Directory

The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

PT-2022-3441

Name of the Vulnerable Software and Affected Versions Vim versions prior to 8.2 Description The issue is related to an out-of-bounds write in the Vim text editor, specifically in the ml append int function, which can lead to a buffer overflow in memory. This can potentially allow a remote attacke...

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Design/Logic Flaw

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-215

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-215

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

CVE-2022-33000 concerns the ML-Scanner package on PyPI, versions v0.1.0–v0.1.5, which reportedly contains a code execution backdoor via the request package. The vulnerability, as described across multiple sources, could allow an attacker to access sensitive user information and digital currency k...

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-33000

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PT-2022-21635

Name of the Vulnerable Software and Affected Versions ML-Scanner versions 0.1.0 through 0.1.5 Description The ML-Scanner package was discovered to contain a code execution backdoor via the request package. This issue allows attackers to access sensitive user information and digital currency keys,...

CVE-2022-33000: Undefined Security Weakness

The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Malicious code in ui-library_ml (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 211d410acb51baf1d8b2941b50887775578aa2b6927e968394f02ee31ee2b7ae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commerce-ml-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f148678a4bc3219a1164e129b11e2fca4b4d33b3974bd1db771904f18c6f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2120 Malicious code in commerce-ml-cdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2f148678a4bc3219a1164e129b11e2fca4b4d33b3974bd1db771904f18c6f2ff Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ml-handbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 417c62dc3f636666a96212766829fefb0d278fe9e68d8621d050a8ffc30052f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4644 Malicious code in ml-handbook (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 417c62dc3f636666a96212766829fefb0d278fe9e68d8621d050a8ffc30052f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...