33 matches found
PYSEC-2026-3070 Snorkel MultitaskClassifier.load uses an unsafe torch.load
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
Snorkel MultitaskClassifier.load uses an unsafe torch.load
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
PT-2026-59689
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weights only=True parameter. This...
CVE-2026-31224
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
Deserialization of Untrusted Data
Overview snorkel is an A system for quickly generating training data with weak supervision Affected versions of this package are vulnerable to Deserialization of Untrusted Data in the MultitaskClassifier.load function. An attacker can execute arbitrary code by supplying a maliciously crafted mode...
Snorkel MultitaskClassifier.load uses an unsafe torch.load
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
EUVD-2026-29508
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
GHSA-GPX5-7XM4-229W Snorkel MultitaskClassifier.load uses an unsafe torch.load
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
CVE-2026-31224
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
CVE-2026-31224
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
CVE-2026-31224
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
CVE-2026-31224
The snorkel library (versions through v0.10.0 ) contains an insecure deserialization vulnerability (CWE-502) within the MultitaskClassifier.load() method of the MultitaskClassifier class. The flaw exists because the method utilizes torch.load() to load model weight files without enabling the secu...
CVE-2026-31224
The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...
Black-Box Privacy Attacks on Shared Representations in Multitask Learning
Multitask learning MTL has emerged as a powerful paradigm that leverages similarities among multiple learning tasks, each with insufficient samples to train a standalone model, to solve them simultaneously while minimizing data sharing across users and organizations. MTL typically accomplishes th...
The Ripple Effect: on Unforeseen Complications of Backdoor Attacks
Recent research highlights concerns about the trustworthiness of third-party Pre-Trained Language Models PTLMs due to potential backdoor attacks. These backdoored PTLMs, however, are effective only for specific pre-defined downstream tasks. In reality, these PTLMs can be adapted to many other...
arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +100 more potentially affected by CVE-2022-23570 via tensorflow-gpu (>=1.1.0, <=2.5.1)
tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.0.9, =0.1.0, =1.0.0, =0.0.1, =0.0.4, =0.1.2 - d3m-simon 1.2.5 - deep-floorplan 0.0.0 and more Source cves: CVE-2022-23570 Source advisory: MEND:CVE-2022-23570...
arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +98 more potentially affected by CVE-2021-41196 via tensorflow-gpu (>=1.1.0, <=2.4.2)
tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.4, =0.0.2, =1.0.4 and more Source cves: CVE-2021-41196 Source advisory: MEND:CVE-2021-41196...
arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +90 more potentially affected by CVE-2021-37665 via tensorflow-gpu (>=1.1.0, <=2.3.2)
tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.2, =0.6.7a1, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2021-37665 Source advisory: MEND:CVE-2021-37665...
arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +90 more potentially affected by CVE-2021-37667 via tensorflow-gpu (>=1.1.0, <=2.3.2)
tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.2, =0.6.7a1, =0.1.2, =0.1.0, =0.1.2 and more Source cves: CVE-2021-37667 Source advisory: MEND:CVE-2021-37667...
arekit (>=0.21.0, <=0.22.1), arenets (>=0.23.0, <=0.23.1) +84 more potentially affected by CVE-2021-29516 via tensorflow-gpu (>=1.1.0, <=2.1.1)
tensorflow-gpu PYPI version =1.1.0, =0.21.0, =0.23.0, =0.9.2, =0.0.1, =0.1.0, =1.0.0, =0.0.1, =0.0.2, =0.6.7a1, =0.1.2, =0.1.0, =0.1.2 - dragonn 0.4.2 - dream-on-gym 0.0.1 and more Source cves: CVE-2021-29516 Source advisory: MEND:CVE-2021-29516...